[PATCH] splice: potential !page dereference