err.h: add __must_check to error pointer handlers