bridge: move mac header copying into br_netfilter