glibc >= 2.35 added a new rseq syscall that is not in our default list of allowed syscalls. That is likely the problem you are running into.
We added rseq to our list of allowed syscalls in common/seccomp: add rseq syscall by belimawr · Pull Request #30620 · elastic/beats · GitHub. The first release with that fix would be 7.17.2: Beats version 7.17.2 | Beats Platform Reference [7.17] | Elastic
If you can't upgrade to 7.17.2 it is possible to customize the list of allowed syscalls through the configuration file in 7.10.x: Use Linux Secure Computing Mode (seccomp) | Filebeat Reference [7.10] | Elastic