bpf: properly enforce index mask to prevent out-of-bounds speculation