netfilter 07/09: simplify nf_conntrack_alloc() error handling