r300g: fix a race between CS and SET_TILING ioctls