vmscan: avoid subtraction of unsigned types