LRO: Add missing checks for invalid IP addresses

LRO bypasses normal ip_input()/tcp_input() and lacks several checks
that are present in the normal path. Without these checks, it
is possible to trigger assertions added in b0ccf53f2455

Reviewed by: glebius, rrs
Sponsored by: Netflix