[PATCH 4.15 052/146] virtio_ring: fix num_free handling in error case