wireguard: coverity fix