KVM: MMU: use kvm_release_pfn_clean to release pfn