xfrm: Clone states properly on migration