The toy NAT rewrite changes address fields, not the payload bytes.
Payload stays the same
The payload is hex 0x6869, the two bytes for hi.
payload bytes=2
NAT does not edit the message body here
Only the return address fields change. The payload bytes stay pinned.
payload unchanged
But checksums still change
Even with the payload unchanged, source address and source port edits change checksum inputs.
checksum repair comes next
Summary
NAT rewrites where the reply should go, not the payload in this toy example.
payload length=2