Fix a use-after-free bug triggered by a race condition.

When the module is unloaded while the callout is running, the request
buffer might be used after it is freed.  Note that only the root user
can cause this condition.  In addition, root will not unload this
module in normal use cases.