If an asynchronous request invalidates a buf, then we might remove it

If an asynchronous request invalidates a buf, then we might remove it
from its vnode's buffer cache in an interrupt context.  Therefore we
need interrupt protection when searching the buffer red-black tree.

ok deraadt@, thib@, art@