KVM: MMU: Use list_for_each_entry_safe in kvm_mmu_commit_zap_page()