mm/fork: fix overflow in vma length when copying mmap on clone