netns xfrm: fix "ip xfrm state|policy count" misreport