arp: fix possible crash in arp_rcv()