ipsec: fix buffer alloc