nv40: fix bug in query code