ARM: entry: data abort: always use r6 for offset