ar71xx: fix off-by-one error in packet descriptor splitting (patch from #13072)