vhost/crypto: fix checks while moving descriptors