vhost: fix possible denial of service on SET_VRING_NUM