ipsec: fix assert condition