bpf: split up instructions and extensions from header