netfilter: xt_owner: bail out with EINVAL in case of unsupported flags