Kernel Tracing

fentry moves a mismatched kernel prototype from silent bad data to a load-time failure

Both eBPF hooks install into the kernel by different routes, but the difference that bites in production is how they hand over arguments, and a kprobe hands over registers by position, trusting whatever sits in them at that moment.