both the kernel and glibc agree that this argument is unsigned; the
incorrect type ssize_t came from erroneous man pages.