CVE-2026-23346 arm64: io: Extract user memory type in ioremap_prot()