scsi: hisi_sas: fix NULL deference when TMF timeouts