nvmet-tcp: fix a crash in nvmet_req_complete()