netfilter: conntrack: fix possible bug_on with enable_hooks=1