netfilter: nft_meta: fix iifgroup matching