x86/xen: Probe target addresses in set_aliased_prot() before the hypercall