net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup (CVE-2026-90058) | HOL Guard CVE