nilfs2: use refcount_dec_and_lock() to fix potential UAF