bpf: reject wrong sized filters earlier