hrtimer: fix rq->lock inversion (again)