cirrus: handle negative pitch in cirrus_invalidate_region()