KVM: Fix off-by-one in overflow check of KVM_ASSIGN_SET_MSIX_NR