Bluetooth: hci_qca: Use del_timer_sync() before freeing (CVE-2022-49555) | HOL Guard CVE