; instead of the less performant int 0x80
; it is possible to use syscall in 32-bit code

; to comply with the Linux syscall code
; the stack needs to be setup correctly
; with the return address and ecx edx ebp pushed
; upon return ecx edx ebp are poped,
; and execution is returned to the caller

; note that it is not possible to call a function
; that takes six arguments because ebp is copied
; from ecx and ecx is overwritten by syscall
; this affects mmap2, futex, sendto, recvfrom, 
; mbind, splice, move_pages, epoll_pwait,
; process_vm_readv, process_vm_writev

format elf executable

; use the standard 32-bit function numbers
SYS32_write             = 4
SYS32_exit_group        = 252
STDOUT_FILENO           = 1

entry $
        mov     eax,SYS32_write
        mov     ebx,STDOUT_FILENO
        mov     ecx,text
        mov     edx,len
        call    syscall32
        mov     eax,SYS32_exit_group
        xor     ebx,ebx
        call    syscall32

syscall32:
        push    ecx edx ebp
        mov     ebp,ecx         ; BROKEN: the sixth parameter is corrupted!
        syscall

text    db      'Hello, World',10
len     = $ - text    

did you file bug reports about them yet?

Plus my kernel is five years old so it might already be fixed, or changed how it works or something.

; On Intel
push ebp
mov ebp,esp
sysenter

; On AMD
push ebp
mov ebp,ecx
syscall
    

;       for SYS in syscall32 int0x80 syscall32 int0x80 ; do fasm -d SYS=$SYS vsyscall32.asm >/dev/null && ./vsyscall32 ; echo ; done

format elf executable

SYS32_write             = 4
SYS32_open              = 5
SYS32_mmap2             = 192
SYS32_exit_group        = 252
STDOUT_FILENO           = 1
O_RDONLY                = 00o
MIN_ERROR               = -4095
MMAP_PROT_READ          = 0x1
MMAP_MAP_PRIVATE        = 0x2

arg_address             = 0
arg_length              = 4
arg_access              = MMAP_PROT_READ
arg_flags               = MMAP_MAP_PRIVATE
arg_offset              = 0

entry $
        mov     eax,SYS32_open
        mov     ebx,fname
        mov     ecx,O_RDONLY
        xor     edx,edx         ; mode
        call    SYS
        cmp     eax,MIN_ERROR
        jae     .done
        ;
        mov     edi,eax
        mov     eax,SYS32_mmap2
        mov     ebx,arg_address
        mov     ecx,arg_length
        mov     edx,arg_access
        mov     esi,arg_flags
        mov     ebp,arg_offset
        call    SYS
        cmp     eax,MIN_ERROR
        jae     .done
        ;
        mov     ecx,eax
        mov     eax,SYS32_write
        mov     ebx,STDOUT_FILENO
        mov     edx,arg_length
        call    SYS
        cmp     eax,MIN_ERROR
        jb      .done
        ;
        mov     eax,SYS32_write
        mov     ebx,STDOUT_FILENO
        mov     ecx,failed_text
        mov     edx,failed_length
        call    SYS
    .done:
        mov     eax,SYS32_exit_group
        xor     ebx,ebx
        call    SYS

syscall32:
        push    ecx edx ebp
        mov     ebp,ecx
        syscall

int0x80:
        int     0x80
        ret

fname           db      '/proc/self/exe',0
failed_text     db      'Failed'
failed_length   =       $ - failed_text    

~ for SYS in syscall32 int0x80 syscall32 int0x80 ; do fasm -d SYS=$SYS vsyscall32.asm >/dev/null && ./vsyscall32 ; echo ; done
Failed
ELF
Failed
ELF    

~ for OFF in {0..59} ; do for REG in 130 ; do ADDR=$(( (1 << OFF) | REG )) ; VAL=$(sudo dd bs=8 if=/dev/cpu/0/msr count=1 status=none skip=$ADDR 2>/dev/null | xxd -p ; test ${PIPESTATUS[0]} -eq 0) && printf "%16x = $VAL\n" $ADDR ; done ; done
              82 = 203b030200000000
              82 = 203b030200000000
        20000082 = 203b030200000000
        40000082 = 203b030200000000
... <snip duplicates> ....
 400000000000082 = 203b030200000000
 800000000000082 = 203b030200000000    

There might be a kernel config you're using. Are you using vanilla upstream kernel, a distro kernel, a custom config kernel…?

/boot grep -i syscall config-$(uname -r)
CONFIG_HAVE_ARCH_AUDITSYSCALL=y
CONFIG_AUDITSYSCALL=y
CONFIG_GENERIC_TIME_VSYSCALL=y
CONFIG_SGETMASK_SYSCALL=y
CONFIG_SYSFS_SYSCALL=y
CONFIG_SYSCTL_SYSCALL=y
CONFIG_BPF_SYSCALL=y
CONFIG_ADVISE_SYSCALLS=y
CONFIG_X86_VSYSCALL_EMULATION=y
# CONFIG_LEGACY_VSYSCALL_NATIVE is not set
CONFIG_LEGACY_VSYSCALL_EMULATE=y
# CONFIG_LEGACY_VSYSCALL_NONE is not set
CONFIG_MODIFY_LDT_SYSCALL=y
CONFIG_HAVE_SYSCALL_TRACEPOINTS=y
CONFIG_FTRACE_SYSCALLS=y

/boot grep -i msr config-$(uname -r)
CONFIG_X86_DEBUGCTLMSR=y
CONFIG_X86_MSR=m
CONFIG_SCSI_ARCMSR=m

/boot