nvme: fix use-after-free in nvme_free_ns_head