[NETFILTER]: ctnetlink: return EEXIST instead of EINVAL for existing nat'ed conntracks