netfilter: bridge: refcount fix