[PATCH 4.14 159/217] netfilter: nft_compat: explicitly reject ERROR and standard target