drm/ttm: Fix a theoretical race in ttm_bo_cleanup_refs()