netfilter: bridge: optionally set indev to vlan