xen: correct race in alloc_p2m_pmd()