ktls: Zero out TLS_GET_RECORD control messages
Otherwise we end up copying one uninitialized byte into the socket
buffer.
Reported by: KMSAN
Reviewed by: jhb
Sponsored by: The FreeBSD Foundation
(cherry picked from commit 6be8944d96d2cb5938b69c63b483efa616eafb56)