KVM: MMU: use page array in unsync walk