2.4 backport of the ip_defrag fix.