Hi Naveen, On Wed, Apr 3, 2024 at 12:48 PM Naveen Chaudhary <naveenchaudhary2010(a)hotmail.com&gt; wrote: I think this is correct and expected output from crash. The "_MODULE_INIT_TEXT_START_npdereference" represents the module_init function null_deref_module_init(). I know you are expecting the same string as the latter, but the internal is a little different from your thought: The "_MODULE_INIT_TEXT_START_npdereference", or "_MODULE_INIT_START_ + module_name", is created intentionally as a pseudo-symbol in crash:symbols.c:store_module_symbols_v2(), as I quote it here: st->ext_module_symtable[mcnt].value = lm->mod_init_module_ptr; st->ext_module_symtable[mcnt].type = 'm'; st->ext_module_symtable[mcnt].flags |= MODULE_SYMBOL; sprintf(buf3, "%s%s", "_MODULE_INIT_START_", mod_name); The value/address of the symbol is mod_init_module_ptr, aka the module_init function. I don't have the history background why it is designed like this. Let's disassemble nfsv4.ko as an example: $ objdump -S nfsv4.ko ... Disassembly of section .init.text: 0000000000000000 <init_module>: static int __init init_nfs_v4(void) { 0: e8 00 00 00 00 callq 5 <init_module+0x5> 5: 53 push %rbx err = nfs_dns_resolver_init(); if (err) goto out; err = nfs_idmap_init(); 6: e8 00 00 00 00 callq b <init_module+0xb> b: 89 c3 mov %eax,%ebx if (err) The function name is taken as init_module instead of init_nfs_v4. So just by guessing, such a pseudo name is better for identification. Thanks, Tao Liu