[ARM] Fix bounding error in ioremap_pfn()