netfilter: xtables: clean up xt_mac match routine