fix data race when accessing the state machine's state

state() is accessed from multiple threads and the underlying _state variable is not protected.