sunrpc/cache: fix off-by-one in qword_get()