Limit `error_cooldown` to when the router is actually in ERROR state.