ipsec: fix ipsec format overflow