l2: fix null deref in l2_to_bvi()