PROBE::KPROCESS.EX(3stap)

💖 PROBE::KPROCESS.EX 💖

okay bestie, welcome to the Kernel Process Tapset section of the SystemTap manual — this is PROBE::KPROCESS.EX(3stap) and she is, lowkey, the moment an exec finishes doing its thing. let's get into it ✨

---

🌸 NAME 🌸

probe::kprocess.exec_complete — the glow-up moment where you return from exec into a whole new program 🦋

---

✨ SYNOPSIS ✨

probe kprocess.exec_complete {}

that's it. that's the whole vibe. no arguments, no parameters, just a probe doing her little thing 💅

---

🎀 VALUES 🎀

these are the lil data girlies you can peek at inside this probe:

• retstr — a string representation of errno. so like, the error number but make it cute and readable. (SystemTap v2.5+) ✨
• name — the name of the system call, and bestie, it's "execve". (SystemTap v2.5+) 💫
• errno — the error number that came out of the exec. if something went wrong, this is the receipts 🧾
• success — a boolean telling you whether the exec was successful or not. true = ate, false = ...did not eat 😭

---

🫶 CONTEXT 🫶

so here's the tea on where you're standing when this fires:

• on success, you're in the context of the new executable. main character energy, brand new you 👑
• on failure, you stay right where you were — still in the context of the caller. no new program, no new you, just vibes 🙈

---

🔥 DESCRIPTION 🔥

This fires at the completion of an exec call — like, the exact moment the exec is done-done. periodt.

In SystemTap v2.5+ she's aliased to the syscall.execve.return probe, so if you know that one, you already know her. iykyk 💜

---

🌈 SEE ALSO 🌈

• tapset::kprocess(3stap) — go read this one next, bestie, it's the whole kprocess fam 🌸

---

and that's the page!! this was SystemTap Tapset Reference, Version... September 2026 edition 🎀 so if you're reading this in a timeline where that date already happened, congrats, you're exactly on time. love that for you. bye bestie!! 💖✨🦋