On a side note, eBPF seems to be the scripting language the kernel would never have, especially with support for compiling programs from C. I wonder why accessing pointers directly is allowed given the verification goals. Why not handles ?