XT_BPF_MAX_NUM_INSTR
#define XT_BPF_PATH_MAX (XT_BPF_MAX_NUM_INSTR * sizeof(struct sock_filter))
struct sock_filter bpf_program[XT_BPF_MAX_NUM_INSTR];
struct sock_filter bpf_program[XT_BPF_MAX_NUM_INSTR];
if (len > XT_BPF_MAX_NUM_INSTR)