KVM: Fix potential guest state leak into host