bpf: Fix signed bounds propagation after mov32