Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put