CVE-2026-31429 net: skb: fix cross-cache free of KFENCE-allocated skb head