netfilter: x_tables: add and use xt_check_entry_offsets