target-arm: Fix descriptor address masking in ARM address translation