[#1630] Fix re-entrance bug in ChannelOutboundBuffer.remove(...)