ipsec: return original SA create error for tunnel create