[Linux-stable-mirror] KVM: Fix stack-out-of-bounds read in write_mmio