mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault()