scsi: target: tcmu: Fix a use after free in tcmu_check_expired_queue_cmd()