Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave()