netfilter: x_tables: don't move to non-existent next rule