r300g: fix pointer arithmetic with void* in transfer_inline_write