netfilter: conntrack: check netns when comparing conntrack objects