Bluetooth: Fix missing hci_dev_lock_bh in user_confirm_reply