netfilter: nf_conntrack: fix early_drop with reliable event delivery