ipsec: fix logic in ext_hdr_is_pre_esp