af_key: fix buffer overread in verify_address_len()