KVM: MMU: improve invalid shadow root page handling