aesni: Fix an out-of-bounds read in AES_GCM_decrypt()

This is the same as 4285655adb74 ("aesni: Avoid a potential
out-of-bounds load in AES_GCM_encrypt()") except for the decryption
path.

Reported by: Jenkins (KASAN job)
Reviewed by: cem
Sponsored by: The FreeBSD Foundation

(cherry picked from commit 4a61d8ef42cb44c337dfdc17424cc2e2f1d67fd5)