Lenders face uncertain legal risks amid PPP fraud investigations