mmt/nvidia: fix crash in ioctl 0x38 handling