#5511·bcc

bindsnoop: error: use of undeclared identifier 'BPF_TRACE_FSESSION'; did you mean 'BPF_TRAMP_FSESSION'?

Author: vt-altCreated May 9, 2026Updated May 21, 2026

v0.36.1 bindsnoop fails on Linux v7.0.5:

+ /usr/src/tmp/bcc-buildroot/usr/share/bcc/tools/bindsnoop
In file included from /virtual/main.c:17:
In file included from include/net/sock.h:46:
In file included from include/linux/netdevice.h:44:
In file included from include/uapi/linux/neighbour.h:6:
In file included from include/linux/netlink.h:9:
In file included from include/net/scm.h:9:
In file included from include/linux/security.h:35:
include/linux/bpf.h:2196:61: error: use of undeclared identifier 'BPF_TRACE_FSESSION'; did you mean 'BPF_TRAMP_FSESSION'?
 2196 |                 if (fentries.links[i]->link.prog->expected_attach_type == BPF_TRACE_FSESSION)
      |                                                                           ^~~~~~~~~~~~~~~~~~
      |                                                                           BPF_TRAMP_FSESSION
include/linux/bpf.h:1316:2: note: 'BPF_TRAMP_FSESSION' declared here
 1316 |         BPF_TRAMP_FSESSION,
      |         ^
include/linux/bpf.h:2196:58: warning: comparison of different enumeration types ('enum bpf_attach_type' and 'enum bpf_tramp_prog_type') [-Wenum-compare]
 2196 |                 if (fentries.links[i]->link.prog->expected_attach_type == BPF_TRACE_FSESSION)
      |                     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ^  ~~~~~~~~~~~~~~~~~~
include/linux/bpf.h:3995:16: error: use of undeclared identifier 'BPF_F_CPU'; did you mean 'BPF_F_IPV6'?
 3995 |         if (!(flags & BPF_F_CPU) && flags >> 32)
      |                       ^~~~~~~~~
      |                       BPF_F_IPV6
/virtual/include/bcc/bpf.h:6146:2: note: 'BPF_F_IPV6' declared here
 6146 |         BPF_F_IPV6                      = (1ULL << 7),
      |         ^
In file included from /virtual/main.c:17:
In file included from include/net/sock.h:46:
In file included from include/linux/netdevice.h:44:
In file included from include/uapi/linux/neighbour.h:6:
In file included from include/linux/netlink.h:9:
In file included from include/net/scm.h:9:
In file included from include/linux/security.h:35:
include/linux/bpf.h:3998:15: error: use of undeclared identifier 'BPF_F_CPU'; did you mean 'BPF_F_IPV6'?
 3998 |         if (flags & (BPF_F_CPU | BPF_F_ALL_CPUS)) {
      |                      ^~~~~~~~~
      |                      BPF_F_IPV6
/virtual/include/bcc/bpf.h:6146:2: note: 'BPF_F_IPV6' declared here
 6146 |         BPF_F_IPV6                      = (1ULL << 7),
      |         ^
In file included from /virtual/main.c:17:
In file included from include/net/sock.h:46:
In file included from include/linux/netdevice.h:44:
In file included from include/uapi/linux/neighbour.h:6:
In file included from include/linux/netlink.h:9:
In file included from include/net/scm.h:9:
In file included from include/linux/security.h:35:
include/linux/bpf.h:3998:27: error: use of undeclared identifier 'BPF_F_ALL_CPUS'
 3998 |         if (flags & (BPF_F_CPU | BPF_F_ALL_CPUS)) {
      |                                  ^~~~~~~~~~~~~~
include/linux/bpf.h:4001:16: error: use of undeclared identifier 'BPF_F_CPU'; did you mean 'BPF_F_IPV6'?
 4001 |                 if ((flags & BPF_F_CPU) && (flags & BPF_F_ALL_CPUS))
      |                              ^~~~~~~~~
      |                              BPF_F_IPV6
/virtual/include/bcc/bpf.h:6146:2: note: 'BPF_F_IPV6' declared here
 6146 |         BPF_F_IPV6                      = (1ULL << 7),
      |         ^
In file included from /virtual/main.c:17:
In file included from include/net/sock.h:46:
In file included from include/linux/netdevice.h:44:
In file included from include/uapi/linux/neighbour.h:6:
In file included from include/linux/netlink.h:9:
In file included from include/net/scm.h:9:
In file included from include/linux/security.h:35:
include/linux/bpf.h:4001:39: error: use of undeclared identifier 'BPF_F_ALL_CPUS'
 4001 |                 if ((flags & BPF_F_CPU) && (flags & BPF_F_ALL_CPUS))
      |                                                     ^~~~~~~~~~~~~~
include/linux/bpf.h:4005:16: error: use of undeclared identifier 'BPF_F_CPU'; did you mean 'BPF_F_IPV6'?
 4005 |                 if ((flags & BPF_F_CPU) && cpu >= num_possible_cpus())
      |                              ^~~~~~~~~
      |                              BPF_F_IPV6
/virtual/include/bcc/bpf.h:6146:2: note: 'BPF_F_IPV6' declared here
 6146 |         BPF_F_IPV6                      = (1ULL << 7),
      |         ^
1 warning and 7 errors generated.
Traceback (most recent call last):
  File "/usr/src/tmp/bcc-buildroot/usr/share/bcc/tools/bindsnoop", line 468, in <module>
    b = BPF(text=bpf_text)
  File "/usr/src/tmp/bcc-buildroot/usr/lib64/python3/site-packages/bcc/__init__.py", line 507, in __init__
    raise Exception("Failed to compile BPF module %s" % (src_file or "<text>"))
Exception: Failed to compile BPF module <text>

Build&test log: https://git.altlinux.org/beehive/logs/Sisyphus/x86_64/archive/2026/0509/error/bcc-0.36.1-alt2