ipsec: fix wrong counter bump