[NETFILTER] ctnetlink: add marking support from userspace