For the interested ones, the guilty function is exec.library/AllocEntry(). Short extract from its autodoc: "The result is unusual! Bit 31 indicates failure."
So, at max, only 31 bits (0 to 30) can be used to represent an address. And 2^31 is 2GB.