uvm_pagerealloc() can now block because of radixtree manipulation, so defer
freeing PTPs until pmap_unmap_ptes(), where we still have the pmap locked
but can finally tolerate context switches again.
To be revisited soon: pmap_map_ptes() seems broken WRT other pmap load.
Reported-by: syzbot+689fb7dab41abff8e75a at syzkaller.appspotmail.com
Reported-by: syzbot+3e7bbf37d37d451b25d7 at syzkaller.appspotmail.com
Reported-by: syzbot+689fb7dab41abff8e75a at syzkaller.appspotmail.com
Reported-by: syzbot+689fb7dab41abff8e75a at syzkaller.appspotmail.com
Reported-by: syzbot+3e7bbf37d37d451b25d7 at syzkaller.appspotmail.com
UnifiedSplitRaw