Because the value of limit is VIRTQUEUE_NUM, if index is equal to
limit, it will cause sg array out of bounds, so correct the judgement
of BUG_ON.

Link: http://lkml.kernel.org/r/5B63D5F6.6080109@huawei.comSigned-off-by: NYiwen Jiang <jiangyiwen@huawei.com>
Reported-By: NDan Carpenter <dan.carpenter@oracle.com>
Acked-by: NJun Piao <piaojun@huawei.com>
Cc: stable@vger.kernel.org
Signed-off-by: NDominique Martinet <dominique.martinet@cea.fr>