Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback (CVE-2026-74529) | HOL Guard CVE