I reproduced what you saw. The bogus resolution of the _exit refs is an ld bug. However, we should probably work around it by arranging that _exit be given a PLT slot. That is necessary for correctness if _exit can ever be called from ld.so after startup. It probably shouldn't ever be, but the PLT slot won't hurt.