Bluetooth: Fix crash in l2cap_chan_send after l2cap_chan_del