KVM: protect assigned dev workqueue, int handler and irq acker