CVE-2025-38074 vhost-scsi: protect vq->log_used with vq->mutex