UBI: Fix double free after do_sync_erase()