xen mmu: fix a race window causing leave_mm BUG()