skbuff: fix a data race in skb_queue_len()