vgsp-sema: release the UVM channel tracker slot too

r1642 gdbstub proved the guest polls pool map slot 1 while the push
releases slot 0: rank-0 UVM channel's uvm_gpu_tracking_semaphore
resolves map_base + index*4 (index=1) = 0x121000004 (PA 0x104ea2004),
the release decoded from its push targets 0x121000000, and writing the
payload into 0x104ea2004 cleared uvm_push_end_and_wait.

When a CE channel releases the pool map page, also apply the
forward-only value to map_base + 4*(rank+1) through the verified pool
resolver (read-back proven), and log pool-tracker-wr.

0 files changed, 0 insertions, 0 deletions