PROBE::KPROCESS.CR(3stap)

💖 PROBE::KPROCESS.CR 💖

okay bestie, so this is a page from the SystemTap Tapset Reference — specifically the Kernel Process Tapset corner of it, in section 3stap. it's a probe page. it's giving "watch the kernel pop out a whole new task" energy and honestly? iconic.

---

✨ NAME ✨

probe::kprocess.create — fires whenever a new process or thread is successfully created 🎀

like, the moment the kernel goes "and a new one is born," this probe is THERE. front row. camera out. 👑

---

🌸 SYNOPSIS 🌸

probe kprocess.create {}

that's it. that's the whole thing. no args, no fuss, just a little empty block waiting to be filled with your hopes and dreams (and printfs). 💅

---

🦋 VALUES 🦋

these are the goodies the probe hands you when it fires, no cap:

• new_pid — the PID of the newly created process 🌱
• new_tid — the TID of the newly created task 🌱

both of them, right there, free of charge. obsessed.

---

🫶 CONTEXT 🫶

the context of this probe is the parent of the created process. so when you're in here, you're hanging out with the parent — the one who did the creating. proud parent energy fr fr. 😭

---

🔥 DESCRIPTION 🔥

so here's the tea: this probe fires whenever a new process is successfully created. and "created" here can mean either of these two situations:

1. it came from a fork (or one of its syscall variants — the whole lil fork family 💕)
2. it's a brand new kernel thread

either way, success is the vibe check it passes. if the creation didn't work out, this probe is not showing up. it only pulls up for the wins. periodt. ✨

---

🌈 SEE ALSO 🌈

• tapset::kprocess(3stap) — go read the whole kprocess tapset, it's the main character and this probe is just one of its supporting roles 💜

---

ngl bestie, this one's short and sweet, so there's genuinely nothing to warn you about. go forth and trace some forks. 🧚

---

and that's a wrap, my love 💖 this was pulled from the SystemTap Tapset Reference, and the page was dated September 2026. mwah. 🎀💅✨