[NETFILTER] ctnetlink: return -EINVAL if size is wrong