net: sched: act_connmark: don't zap skb->nfct