rndis_host: fix transfer size negotiation