kernel: add a patch for isolating individual bridge ports