debloat: use __syscall instead of syscall where possible