This fixes sending BT_HCI_CMD_LE_CREATE_CONN_CANCEL when
hci_le_create_conn_sync has not been called because HCI_CONN_SCANNING
has been clear too early before its cmd_sync callback has been run.
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
 
        bt_dev_dbg(hdev, "conn %p", conn);
 
+       clear_bit(HCI_CONN_SCANNING, &conn->flags);
        conn->state = BT_CONNECT;
 
        return hci_le_create_conn_sync(hdev, conn);
        conn->sec_level = BT_SECURITY_LOW;
        conn->conn_timeout = conn_timeout;
 
-       clear_bit(HCI_CONN_SCANNING, &conn->flags);
-
        err = hci_cmd_sync_queue(hdev, hci_connect_le_sync,
                                 UINT_PTR(conn->handle),
                                 create_le_conn_complete);