Per discussion in #3813 it'd be good if the doRead call didn't latch errno several levels away from where the actual syscall was performed. We should change the APIs to return {rc, errnno} in some form to better futureproof in case the intermediate function calls add their own errno-corrupting debug logging.

We could also get really fancy and insist that errno is latched via fix_format fixes, as also discussed there.