ipv6: xfrm: dereference inner ipv6 header if encapsulated