bpf_prog_create(9)

okay bestie, welcome to bpf_prog_create(9) from the Kernel API Manual ✨ this one is literally about creating an unattached filter, and it's giving solo main character energy 💅

🌸 NAME 🌸

bpf_prog_create — create an unattached filter 🫶

✨ SYNOPSIS ✨

int bpf_prog_create (struct bpf_prog **pfp , struct sock_fprog_kern
       *fprog );

🎀 ARGUMENTS 🎀

• pfp — the unattached filter that is created 👑 yes, this is the new filter being made
• fprog — the filter program 🌸

🦋 DESCRIPTION 🦋

okay so bpf_prog_create creates a filter that is independent of any socket — she does not need a socket to be attached to, she's doing her own thing 🔥

First, it runs some sanity checks on the filter to make sure it does not explode on us later 😭💀. If an error occurs, or if there is insufficient memory for the filter, a negative errno code is returned. On success, the return is zero ✨ no cap.

bestie, quick vibe check: negative errno code = it did not slay; zero = success, periodt 💅

🌈 SEE ALSO 🌈

• Kernel file ./net/core/filter.c 🧚
• sk_filter_trim_cap(9), bpf_convert_filter(9), bpf_check_classic(9), sk_filter_release_rcu(9), sk_filter_release(9), bpf_prog_create_from_user(9), sk_attach_filter(9), xdp redirect(9), bpf_skb_meta_pointer(9), bpf_dynptr_from_skb_meta(9), bpf_xdp_pull_data(9), bpf_icmp_send(9) 💖

cute little sign-off: this page comes from the ./net/core source/version and is dated October 2026 — bpf_prog_create(9), and that's the whole manual page, bestie 🎀💜