[PATCH 4.4 29/85] Bluetooth: Fix refcount use-after-free issue