Fix null pointer dereferences in udp_ready() (v9.18)

The query pointer was detached too early leading to null pointer reference. Move the query_detach() after the query->canceled check.

Closes #3193 (closed)