net/sched: act_ipt: add sanity checks on skb before calling target