eBPF Program Hooked to sys_read Traces Negative File Descriptor Values
I’m trying to use an eBPF program to trace the file descriptor passed to the sys_read syscall in a specific process. However, the program always traces negative file descriptor values.