_kmem_unback
(void)_kmem_unback(object, addr, size);
arena = _kmem_unback(kernel_object, (uintptr_t)addr, size);