vl: use QLIST_FOREACH_SAFE to visit change state handlers This lets a handler delete itself. Acked-by: Juan Quintela <quintela@redhat.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>