diff --git a/sys/netpfil/pf/pf.c b/sys/netpfil/pf/pf.c
--- a/sys/netpfil/pf/pf.c
+++ b/sys/netpfil/pf/pf.c
@@ -8354,7 +8354,7 @@
 	pd.af = AF_INET;
 	pd.act.rtableid = -1;
 
-	if (m->m_len < sizeof(struct ip) &&
+	if (__predict_false(m->m_len < sizeof(struct ip)) &&
 	    (m = *m0 = m_pullup(*m0, sizeof(struct ip))) == NULL) {
 		DPFPRINTF(PF_DEBUG_URGENT,
 		    ("pf_test: m_len < sizeof(struct ip), pullup failed\n"));