af_key: fix buffer overread in parse_exthdrs()