rmap: fix NULL-pointer dereference on THP munlocking