CVE-2025-39748 bpf: Forget ranges when refining tnum after JSET