netfilter: conntrack: avoid zeroing timer