memcg: move page-freeing code out of lock