xfrm: Fix crashes in xfrm_lookup()