[NETFILTER] ip_tables: NUMA-aware allocation