netfilter: cttimeout: fix buffer overflow