net: fix fanout UAF in packet_release() via NETDEV_UP race (CVE-2026-31504) | HOL Guard CVE