GStreamer first looks at the sender ssrc. If it gets NULL then it tries with media ssrc. So, if my proposal makes it work it means that, somehow, GStreamer is getting “something” when looking for sender ssrc = 0, which is crazy.
BTW: when you did the UDP packet mangling to set sender ssrc, did you properly write the ssrc in network order?