arm64/crypto: fix data corruption bug in GHASH algorithm