netfilter: correct error in construction of NAT tuple