Fix race condition during socket creation

Docker-DCO-1.1-Signed-off-by: Gleb Fotengauer-Malinovskiy <glebfm@altlinux.org> (github: glebfm)
update container's state after we close the waitLock

Docker-DCO-1.1-Signed-off-by: Victor Vieux <vieux@docker.com> (github: vieux)
no default default number in names

Docker-DCO-1.1-Signed-off-by: Victor Vieux <vieux@docker.com> (github: vieux)
use stderr to debug iptables

Docker-DCO-1.1-Signed-off-by: Victor Vieux <vieux@docker.com> (github: vieux)
Merge pull request #6065 from vieux/fix_race_waitlock

update container's state after we close the waitLock
Merge pull request #6124 from vieux/standadize_debug_iptables

use stderr to debug iptables
Merge pull request #6123 from vieux/no_number_default

no default default number in names
Merge pull request #5947 from glebfm/fix-socket-race-condition

Fix race condition during socket creation