{layer:'libc', mode:'USER', t:'glibc puts the syscall number (0) in <code>rax</code>, args in registers, and executes the <code>syscall</code> trap instruction ...