Attached is a fix from Alexey for incorrect error handling in nf_conntrack_expect. I'll also queue it up for -stable.