Rework netfilter tests in preparation for running them on Buildkite.

The main goal of this rework is to make the netfilter tests better to work with
on native Linux. The main change to this end is adding NetfilterBoundSocket,
which helped debug what was going on with NetlinkNetfilterBatchRequestAckOrError
on certain kernels. Prior to this, running the test natively on older kernels
would simply block forever.

Destroying test-created tables as cleanup actions has been removed in favour of
simply creating uniquely-named tables. This is preferable in case the destroy
command itself fails (as it does on older kernels), and we can guarantee that
tables won't get reused between tests, which causes problems.

ErrNewBaseChainWithUnsupportedFamilyChainTypePair has been removed because it is
incorrect regarding native Linux behaviour; support for it needs to be added in
gVisor but that's outside the scope of this CL.

socket_netlink_netfilter_test was tested on Linux 6.8 (cgroupsv2 agents on
buildkite).

PiperOrigin-RevId: 823722006

Author: konstantin-s-bogom

test/syscalls/linux/BUILD

@@ -3544,6 +3544,7 @@ cc_binary(
         "//test/util:socket_util",
         "//test/util:test_main",
         "//test/util:test_util",
+        "@com_google_absl//absl/strings",
         "@com_google_absl//absl/strings:str_format",
     ],
 )
@@ -3729,7 +3730,10 @@ cc_library(
         ":socket_netlink_util",
         "//test/util:file_descriptor",
         "//test/util:posix_error",
+        "//test/util:save_util",
+        "//test/util:test_util",
         "@com_google_absl//absl/log",
+        "@com_google_absl//absl/strings:string_view",
     ],
 )