ipv6: fix possible crashes in ip6_cork_release()