nat: fix vnet_feature_next in source hairpinning