netfilter: nf_nat: support mangling a single TCP packet multiple times