KVM: MMU: don't check PT_WRITABLE_MASK directly