[PATCH 5.14 121/169] KVM: SEV-ES: Set guest_state_protected after VMSA update