nat: fix coverity errors