CVE-2024-26882 net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()