ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()