[PATCH 4.14 088/140] virtio_ring: fix num_free handling in error case