bcc-tools: trace.py syscall trace not working for proccess in container(lxc)

[rhjdvsgsgks]

im trying to debug a init proccess in a lxc container. for better reproduce, im using mknod tool instead bellow

with trace 'c:mknodat "%s", arg2' i can see the call to mknodat while im running mknod test c 1 11 out of container.

but if i run the same thing in container. trace.py didnt show me anything. by using strace, i confirmed the mknodat syscall has been send out without any issue.

is this a expected behavior?

im using trace 'filename_create(int dfd, struct filename *name, struct path *path, unsigned int lookup_flags) "%s", name->name' -UK (and find through stack manually) as a alternative now. because do_mknodat not exported and optimized by compiler, which changed signature

version: 5f21a72
kernel version: 6.8.1

[rhjdvsgsgks]

maybe related to #4854