bridge: Fix use-after-free in bridge_aa_refresh_queue().