[NETFILTER]: ctnetlink: fix reference count leak