vhost: fix off-by-one error on descriptor number check