ipv6: Fix IPsec pre-encap fragmentation check