netfilter: nft_compat: don't use refcount_inc on newly allocated entry