> I don't know what exactly can load this module

Well, for one thing, opening an AF_ALG socket, as the exploit does.

rmmod just tells you it's not loaded; you'd have to delete the module to prevent it auto-loading.