PAX: size overflow in xfrm4_transport