EPT_VIOLATION_DATA_WRITE
if (ept_qual & EPT_VIOLATION_DATA_WRITE)
write = ept_qual & EPT_VIOLATION_DATA_WRITE ? 1 : 0;