sysctl.c: fix underflow value setting risk in vm_table