Somehow this error is not explicit, I thought that sysctl was involved in this matter but it was clearly logstash's input's buffer.

input {
    udp {
        type => "netflow"
        port => 5555
        codec => netflow {
            versions => [5]
        }
        workers => 8
        receive_buffer_bytes => 2129920
        queue_size => 200000
    }
}

has fixed it

add_field => [ "[geoip][coordinates]", "%{[geoip][longitude]}" ]
add_field => [ "[geoip][coordinates]", "%{[geoip][latitude]}" ]