io_uring: fix list corruption for splice file_get