fw4: fix skipping invalid ipset entries