fs/ufs: avoid potential u32 multiplication overflow