nilfs2: potential integer overflow in nilfs_ioctl_clean_segments()