bpf: Limit bpf program signature size

In the Linux kernel, the following vulnerability has been resolved:

bpf: Limit bpf program signature size

Practical BPF signatures are significantly smaller than

KMALLOC_MAX_CACHE_SIZE

Allowing larger sizes opens the door for abuse by passing excessive

size values and forcing the kernel into expensive allocation paths (via

kmalloc_large or vmalloc).