kvm: constrain listen port range for qemu to avoid OS local port range.