kvm:vmx: more complete state update on APICv on/off