tcp: fix crash in tcp_xmit_retransmit_queue