time: fix overflow in timeval_add_msec()