netfilter: discard overlapping IPv6 fragment