bpf/verifier: disallow pointer subtraction