hw/arm/virt: fix cmdline parsing bug with CPU options and smp > 1