iptables-legacy errors in gVisor (release-20240610.0) with --net-raw

### Description

I am encountering errors when using iptables-legacy with gVisor version release-20240610.0. I have configured gVisor with the `--net-raw` flag.

The following iptables-legacy commands result in the error message "iptables: Invalid argument. Run 'dmesg' for more information":

* `iptables -P FORWARD DROP`
* `iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT`

However, running `dmesg` does not reveal any relevant logs related to iptables errors.

### Steps to reproduce

1. Install gVisor version release-20240610.0.
2. Configure gVisor with the `--net-raw` flag.
3. Run the following commands:
* `iptables -P FORWARD DROP`
* `iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT`
4. Observe the "Invalid argument" error message.
5. Run `dmesg` and verify there are no relevant iptables error logs.

### runsc version

```shell
runsc version release-20240610.0
spec: 1.1.0-rc.1
```

### docker version (if using docker)

```shell
24.0.5
```

### uname

5.15.0-112

### kubectl (if using Kubernetes)

_No response_

### repo state (if built from source)

_No response_

### runsc debug logs (if available)

_No response_