relay: fix subbuf_splice_actor() adding too many pages