[PATCH OLK-6.6 2/4] netfilter: x_tables: allocate hook ops while under mutex