iommu/amd: move wait_on_sem() out of spinlock (CVE-2026-43253) | HOL Guard CVE