l2tp: protect tunnel->del_work by ref_count