netprio_cgroup: fix an off-by-one bug