ebt_buf_add
ret = ebt_buf_add(state, buf, sizeof(*match32));
return ebt_buf_add(state, entry, sizeof(struct ebt_entries));
ret = ebt_buf_add(state, entry,
ret = ebt_buf_add(state, &offsets[1],