CVE-2025-38591 bpf: Reject narrower access to pointer ctx fields