On Fri, Nov 18, 2022 at 01:06:08PM -0500, Steven Rostedt wrote: > How do I know that a function return was modified by BPF? If I'm debugging > something, is it obvious to the developer that is debugging an issue > (perhaps unaware of what BPF programs are loaded on the users machine), > that the return of a function was tweaked by BPF and that could be the > source of the bug? Have it taint the kernel if something is overridden ;-) Then we can all ignore the report until it comes back without taint.