xfrm: fix xfrm_input/xfrm_tunnel_check oops