splice: fix offset mangling with direct splicing (sendfile)