netfilter: expectation NAT direction is 32 byte attribute