drm/i915: fix integer overflow in i915_gem_execbuffer2()