malloc: use pointer diff macro in IOVA mapping