net: move fib_rules_unregister() under rtnl lock