io_uring: fix mis-refcounting linked timeouts