mmt: capture writes between end of mmaped region and end of last page

... and add a test case