drm/vmwgfx: Fix double free in vmw_recv_msg()