ip: fix buffer leaks in reassembly