net/sched: act_ct: fix wild memory access when clearing fragments