KVM: Don't assign vcpu->cr3 if it's invalid: check first, set last