Petr, you cannot really rely on the bpftrace-tools scripts in general, as many of them aren't really actively maintained. This has nothing to do with the kernel or TW (I suppose we may want to remove bpftrace-tools but sometimes they serve as a starting point/templates). The specific example of bashreadline.bt hasn't been updated for 6 years upstream: $ git log -1 tools/bashreadline.bt commit 97fd5c4e93fc2cc2a748f169936b53cc0481c918 Author: Krzesimir Nowak <krzesimir@kinvolk.io> Date: Fri Oct 19 12:37:58 2018 +0200 Use env to find bpftrace I assume that the bpftrace syntax has changed somewhat across this time. So: $ bpftrace --version bpftrace v0.20.4 $ bpftrace -e 'ur:/lib64/libreadline.so.8:readline /comm=="bash"/ { time("%H:%M:%S "); printf("%-6d %s\n", pid, str(retval)); }' Attaching 1 probe...