kcm: fix a signedness in kcm_splice_read()