netfilter: invoke synchronize_rcu after set the _hook_ to NULL