mm: allow pfnmap ->fault()s