nv50/p2p: Nailed down remaining WRITE_SETUP bitfields.