net/sfc: fix outer match in MAE backend