fix malloc_usable_size() caculation

According to the definition of nextf:
"nextf[i] is the pointer to the next free block of size 2^(i+3)"

Signed-off-by: Lance Chen <cyen0312@gmail.com>