mm: mremap: validate input before taking lock