net/sched: act_ipt: zero skb->cb before calling target