l2tp: hold socket before dropping lock in l2tp_ip{, 6}_recv()