pipe: add pipe_buf_steal() helper