crypto/dpaax_sec: fix 18-bit PDCP cases with HFN override