xfrm: fix xfrm by MARK logic