netfilter: Pass nf_hook_state through arpt_do_table().