md: raid10: Fix null pointer dereference in fix_read_error()