netfilter: ctnetlink: fix race between delete and timeout expiration