mac80211: brcmfmac: fix use-after-free & possible NULL pointer dereference