pf: ensure mbufs are long enough before we copy out IP(v6) headers

This isn't likely to be an issue on real hardware (as Ethernet has a
minimal packet length of 64 bytes), but can cause panics with short
packets on if_epair.

Sponsored by: Rubicon Communications, LLC ("Netgate")