FYI, I am bisecting v6.1.73(poc fail) and v6.1.70(poc ok). Also, I checked 5.15.206, it is strange but vulnerable... I use --force-rxrpc and not compile CONFIG_INET_ESP to avoid gone to esp path. BRs Wentao Guan