datapath: Make VERIFY_NUL_STRING return a negative error code.