vfs: protect i_nlink