user_data: syscalls are a source of user data