ip_gre: validate csum_start only on pull