[kernel] netfilter: add a check for ip proto in netfilter_match_speedup patches ...