x86/bugs: Rework spec_ctrl base and mask logic