netfilter: xtables: change xt_match.checkentry return type