Handle bogus %cs selector in single-step instruction decoding (CVE-2007-3731)