[PATCH] virtio_ring: fix num_free handling in error case