[XFRM]: Fix possible overflow of sock->sk_policy