[PATCH 1/2] selftests/netfilter: use socklen_t, not a signed int, for len