Clearing DF bit may do the job, but the traffic will become very slow because of time spent in reassembly. You should rather ensure that the packets do not get fragmented in between. Although if the packets get fragmented at the endpoints b4 encryption, it may make things work right. There are many ways to accomplish this:
i)First is as i said manually tweak the mtu on tunnel interfaces but i just noticed that you don't have any tunnel interface as its ezvpn. Also the problem is with some kind of traffic only.
ii)PMTUD: Router should do a discovery process
iii)Set the DF bit in encapsulated packet and then allow fragmentation b4 encryption
crypto ipsec df-bit set or crypto ipsec df-bit copy
crypto ipsec fragmentation before-encryption