bpf, events: fix offset in skb copy handler