xen/p2m: check MFN is in range before using the m2p table