netfilter: fix race in conntrack between dump_table and destroy