netfilter: bridge: use rcu hook to resolve br_netfilter dependency