xfrm: avoid possible oopse in xfrm_alloc_dst