xread/xwrite: clip MAX_IO_SIZE to SSIZE_MAX