nilfs2: use semaphore to protect pointer to a writable FS-instance