This commit fixes a NULL dereference introduced by
ee8f0516 when demux_Control( DEMUX_GET_TITLE )
pass but the input doesn't have any title.

The input_ControlVarStop() function cleans up chapters callback by destroying
the variables like input_ControlVarTitle() is already doing.

Fixes #19218

(cherry picked from b26c856b)