[Bug 59991] ntdll-ForceBottomUpAlloc: MEM_TOP_DOWN allocations can return addresses above the user address limit