The code relies on kvm->requests_lock inhibiting preemption.

Noted by Jan Kiszka.
Signed-off-by: Avi Kivity <avi@redhat.com>