[PATCH 6.14 511/783] xfrm: prevent high SEQ input in non-ESN mode