tcp: avoid infinite loop in tcp_splice_read()