On Wed, 6 Apr 2016, Chris J Arges wrote: > I think this approach needs more thought and my code has bug(s).
And indeed there is... long (*__kvm_arch_vm_ioctl)(struct file *filp, unsigned long ioctl, unsigned long arg) = NULL; Use a different name than __kvm_arch_vm_ioctl and (ideally) make it static. kallsyms_lookup_name("__kvm_arch_vm_ioctl") returns the address of this variable from the patch module. Miroslav