[IPSEC] Fix xfrm to pfkey SA state conversion