mqueue: fix a use-after-free in sys_mq_notify()