netfilter: ctnetlink: fix timeout calculation