scsi: qla2xxx: Off by one in qlt_ctio_to_cmd()