netfilter: conntrack: fix dropping packet after l4proto->packet()