For the ‘tracepoint:syscalls:sys_enter_fchownat’ I’m trying to print the program name and pid of the calling but also of all the parent programs.

I know pid and comm but how do I go up the tree?

I tried a number of things..

$current_pid = $pid_ns[$current_pid]->parent;
parent_pid = task_struct_ptr->parent->pid;

I checked the LLMs as well but they hallucinated up a storm.