SELinux: indicate fatal error in compat netfilter code