xfrm: fix dflt policy check when there is no policy configured