userfaultfd: use mmgrab instead of open-coded increment of mm_count