[PATCH 4.4 167/193] KVM: VMX: Make indirect call speculation safe