kernel: fix conntrack leak for flow_offload connections