ipsec: ipsec-input: check for too-short packets