i965: Fix crash in do_blit_readpixels()