auditctl is a great utility for monitoring many things, such as executed system calls.
I would ideally like to know either the CPU or the POSIX thread that instantiated each recorded system call. In the log, I see:
type=SYSCALL msg=audit(1561851079.335:286): arch=c000003e syscall=9 success=yes exit=140507297914880 a0=0 a1=1000 a2=3 a3=22 items=0 ppid=22818 pid=24283 auid=1005 uid=1005 gid=1005 euid=1005 suid=1005 fsuid=1005 egid=1005 sgid=1005 fsgid=1005 tty=pts0 ses=89 comm="my_benchmark" exe="my_benchmark" key=(null)
I don't think any of these do the trick, unless I'm missing something. Does anyone know if what I want is possible? Thanks.