bundle transport: fix an alloc_ref() call