ksmbd: fix out-of-bound read in smb2_write