I'm not sure if this can underflow but Smatch complains.  It seems
harmless to add a check for negatives.
Signed-off-by: NDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: NKalle Valo <kvalo@codeaurora.org>