[NETFILTER]: nf_conntrack: don't use nfct in skb if conntrack is disabled