netfilter: conntrack: avoid reload of ct->status