CVE-2025-38251 atm: clip: prevent NULL deref in clip_push()