CVE-2025-39677 net/sched: Fix backlog accounting in qdisc_dequeue_internal