KVM: avoid using rcu_dereference_protected