CVE-2024-49946 ppp: do not assume bh is held in ppp_channel_bridge_input()