netfilter: nf_conntrack: table max size should hold at least table size