netfilter: fix possible removal of wrong hook