netfilter: ctnetlink: don't dump ct extensions of unconfirmed conntracks