exec: Change tlb_fill() argument to CPUState