pfkey.c is now more picky about buffer length validation. spddump (setkey -DP) will print lifetime information.