xfrm_user: fix freeing of xfrm states on acquire