Package: src:linux Version: 7.0.4-1~bpo13+1 Severity: normal Tags: ipv6 X-Debbugs-Cc: [email protected] User: [email protected] Usertags: amd64
Hi, On my LAN interface (br0) I have IPv6 privacy extensions enabled (sysctl net.ipv6.conf.br0.use_tempaddr=2). Since upgrading the kernel to this version the temporary IPv6 addresses are renewed prematurely whenever a network interface is removed (e.g. due to stopping a docker container which removes the associated veth device). Or more precisely, the renewal happens when the first router advertisement is received after a network interface has been removed. Expected behavior is that removal of an unrelated network interface should have no influence on when the temp address is renewed. Note that in order to trigger this issue the removed interface doesn't have to be part of the br0 bridge where the temp addresses reside, any interface will do (for example running "ip link add dummy0 type dummy; ip link del dummy0"). Even the deletion of an interface that has IPv6 disabled (net.ipv6.conf.dummy0.disable_ipv6=1) triggers the issue. Just adding a new interface doesn't trigger the issue, only removing one does. Note that the very short lifetimes on the public addresses (2a02:908:...) that you can see in the system info below doesn't have anything to do with the issue, it's just a quirk of my ISP. I'm seeing the same behavior on another machine in a different network where the lifetimes are much longer. Regards, Andreas Ferber -- Package-specific info: ** Version: Linux version 7.0.4+deb13-amd64 ([email protected]) (x86_64-linux-gnu-gcc-14 (Debian 14.2.0-19) 14.2.0, GNU ld (GNU Binutils for Debian) 2.44) #1 SMP PREEMPT_DYNAMIC Debian 7.0.4-1~bpo13+1 (2026-05-08) ** Command line: BOOT_IMAGE=/vmlinuz-7.0.4+deb13-amd64 root=/dev/mapper/xena_ssd-sys_root ro quiet splash ** Not tainted ** Kernel log: May 16 01:33:17 xena kernel: veth2c4a7da (unregistering): left allmulticast mode May 16 01:33:17 xena kernel: veth2c4a7da (unregistering): left promiscuous mode May 16 01:33:17 xena kernel: docker0: port 2(veth2c4a7da) entered disabled state May 16 01:33:18 xena kernel: docker0: port 2(vethc39ea00) entered blocking state May 16 01:33:18 xena kernel: docker0: port 2(vethc39ea00) entered disabled state May 16 01:33:18 xena kernel: vethc39ea00: entered allmulticast mode May 16 01:33:18 xena kernel: vethc39ea00: entered promiscuous mode May 16 01:33:18 xena kernel: eth0: renamed from vetha19eb00 May 16 01:33:18 xena kernel: docker0: port 2(vethc39ea00) entered blocking state May 16 01:33:18 xena kernel: docker0: port 2(vethc39ea00) entered forwarding state May 16 01:33:31 xena kernel: docker0: port 2(vethc39ea00) entered disabled state May 16 01:33:31 xena kernel: vetha19eb00: renamed from eth0 May 16 01:33:31 xena kernel: docker0: port 2(vethc39ea00) entered disabled state May 16 01:33:31 xena kernel: vethc39ea00 (unregistering): left allmulticast mode May 16 01:33:31 xena kernel: vethc39ea00 (unregistering): left promiscuous mode May 16 01:33:31 xena kernel: docker0: port 2(vethc39ea00) entered disabled state May 16 01:34:18 xena kernel: docker0: port 3(veth0e001ba) entered disabled state May 16 01:34:18 xena kernel: veth658f1ec: renamed from eth0 May 16 01:34:18 xena kernel: docker0: port 3(veth0e001ba) entered disabled state May 16 01:34:18 xena kernel: veth0e001ba (unregistering): left allmulticast mode May 16 01:34:18 xena kernel: veth0e001ba (unregistering): left promiscuous mode May 16 01:34:18 xena kernel: docker0: port 3(veth0e001ba) entered disabled state May 16 01:34:19 xena kernel: docker0: port 2(vethff339bc) entered blocking state May 16 01:34:19 xena kernel: docker0: port 2(vethff339bc) entered disabled state May 16 01:34:19 xena kernel: vethff339bc: entered allmulticast mode May 16 01:34:19 xena kernel: vethff339bc: entered promiscuous mode May 16 01:34:19 xena kernel: eth0: renamed from vethf1ff360 May 16 01:34:19 xena kernel: docker0: port 2(vethff339bc) entered blocking state May 16 01:34:19 xena kernel: docker0: port 2(vethff339bc) entered forwarding state May 16 01:34:19 xena kernel: docker0: port 2(vethff339bc) entered disabled state May 16 01:34:19 xena kernel: vethf1ff360: renamed from eth0 May 16 01:34:19 xena kernel: docker0: port 2(vethff339bc) entered disabled state May 16 01:34:19 xena kernel: vethff339bc (unregistering): left allmulticast mode May 16 01:34:19 xena kernel: vethff339bc (unregistering): left promiscuous mode May 16 01:34:19 xena kernel: docker0: port 2(vethff339bc) entered disabled state May 16 01:34:19 xena kernel: docker0: port 2(vethf85e2aa) entered blocking state May 16 01:34:19 xena kernel: docker0: port 2(vethf85e2aa) entered disabled state May 16 01:34:19 xena kernel: vethf85e2aa: entered allmulticast mode May 16 01:34:19 xena kernel: vethf85e2aa: entered promiscuous mode May 16 01:34:19 xena kernel: eth0: renamed from veth4307e5e May 16 01:34:19 xena kernel: docker0: port 2(vethf85e2aa) entered blocking state May 16 01:34:19 xena kernel: docker0: port 2(vethf85e2aa) entered forwarding state May 16 01:34:19 xena kernel: docker0: port 2(vethf85e2aa) entered disabled state May 16 01:34:19 xena kernel: veth4307e5e: renamed from eth0 May 16 01:34:19 xena kernel: docker0: port 2(vethf85e2aa) entered disabled state May 16 01:34:19 xena kernel: vethf85e2aa (unregistering): left allmulticast mode May 16 01:34:19 xena kernel: vethf85e2aa (unregistering): left promiscuous mode May 16 01:34:19 xena kernel: docker0: port 2(vethf85e2aa) entered disabled state May 16 01:34:19 xena kernel: docker0: port 2(veth004d307) entered blocking state May 16 01:34:19 xena kernel: docker0: port 2(veth004d307) entered disabled state May 16 01:34:19 xena kernel: veth004d307: entered allmulticast mode May 16 01:34:19 xena kernel: veth004d307: entered promiscuous mode May 16 01:34:20 xena kernel: eth0: renamed from veth6989df1 May 16 01:34:20 xena kernel: docker0: port 2(veth004d307) entered blocking state May 16 01:34:20 xena kernel: docker0: port 2(veth004d307) entered forwarding state May 16 01:34:20 xena kernel: docker0: port 2(veth004d307) entered disabled state May 16 01:34:20 xena kernel: veth6989df1: renamed from eth0 May 16 01:34:20 xena kernel: docker0: port 2(veth004d307) entered disabled state May 16 01:34:20 xena kernel: veth004d307 (unregistering): left allmulticast mode May 16 01:34:20 xena kernel: veth004d307 (unregistering): left promiscuous mode May 16 01:34:20 xena kernel: docker0: port 2(veth004d307) entered disabled state May 16 01:34:20 xena kernel: docker0: port 2(veth506d8dd) entered blocking state May 16 01:34:20 xena kernel: docker0: port 2(veth506d8dd) entered disabled state May 16 01:34:20 xena kernel: veth506d8dd: entered allmulticast mode May 16 01:34:20 xena kernel: veth506d8dd: entered promiscuous mode May 16 01:34:20 xena kernel: eth0: renamed from vetha7bc4b0 May 16 01:34:20 xena kernel: docker0: port 2(veth506d8dd) entered blocking state May 16 01:34:20 xena kernel: docker0: port 2(veth506d8dd) entered forwarding state May 16 01:34:20 xena kernel: docker0: port 2(veth506d8dd) entered disabled state May 16 01:34:20 xena kernel: vetha7bc4b0: renamed from eth0 May 16 01:34:20 xena kernel: docker0: port 2(veth506d8dd) entered disabled state May 16 01:34:20 xena kernel: veth506d8dd (unregistering): left allmulticast mode May 16 01:34:20 xena kernel: veth506d8dd (unregistering): left promiscuous mode May 16 01:34:20 xena kernel: docker0: port 2(veth506d8dd) entered disabled state May 16 01:34:20 xena kernel: docker0: port 2(vethe9696fa) entered blocking state May 16 01:34:20 xena kernel: docker0: port 2(vethe9696fa) entered disabled state May 16 01:34:20 xena kernel: vethe9696fa: entered allmulticast mode May 16 01:34:20 xena kernel: vethe9696fa: entered promiscuous mode May 16 01:34:20 xena kernel: eth0: renamed from vethe28dc5b May 16 01:34:20 xena kernel: docker0: port 2(vethe9696fa) entered blocking state May 16 01:34:20 xena kernel: docker0: port 2(vethe9696fa) entered forwarding state May 16 01:34:20 xena kernel: docker0: port 2(vethe9696fa) entered disabled state May 16 01:34:20 xena kernel: vethe28dc5b: renamed from eth0 May 16 01:34:20 xena kernel: docker0: port 2(vethe9696fa) entered disabled state May 16 01:34:20 xena kernel: vethe9696fa (unregistering): left allmulticast mode May 16 01:34:20 xena kernel: vethe9696fa (unregistering): left promiscuous mode May 16 01:34:20 xena kernel: docker0: port 2(vethe9696fa) entered disabled state May 16 01:34:20 xena kernel: docker0: port 2(veth409012e) entered blocking state May 16 01:34:20 xena kernel: docker0: port 2(veth409012e) entered disabled state May 16 01:34:20 xena kernel: veth409012e: entered allmulticast mode May 16 01:34:20 xena kernel: veth409012e: entered promiscuous mode May 16 01:34:21 xena kernel: eth0: renamed from vethcc6e85c May 16 01:34:21 xena kernel: docker0: port 2(veth409012e) entered blocking state May 16 01:34:21 xena kernel: docker0: port 2(veth409012e) entered forwarding state May 16 01:34:39 xena kernel: docker0: port 2(veth409012e) entered disabled state May 16 01:34:39 xena kernel: vethcc6e85c: renamed from eth0 May 16 01:34:39 xena kernel: docker0: port 2(veth409012e) entered disabled state May 16 01:34:39 xena kernel: veth409012e (unregistering): left allmulticast mode May 16 01:34:39 xena kernel: veth409012e (unregistering): left promiscuous mode May 16 01:34:39 xena kernel: docker0: port 2(veth409012e) entered disabled state ** Model information sys_vendor: ASRock product_name: X670E Steel Legend product_version: Default string chassis_vendor: Default string chassis_version: Default string bios_vendor: American Megatrends International, LLC. bios_version: 2.10 board_vendor: ASRock board_name: X670E Steel Legend board_version: Default string ** Configuration for modprobe: blacklist arkfb blacklist aty128fb blacklist atyfb blacklist cirrusfb blacklist cyber2000fb blacklist kyrofb blacklist matroxfb_base blacklist mb862xxfb blacklist microcode blacklist neofb blacklist pm2fb blacklist pm3fb blacklist radeonfb blacklist s3fb blacklist savagefb blacklist sisfb blacklist tdfxfb blacklist tridentfb blacklist vt8623fb options bonding max_bonds=0 options cx88_alsa index=-2 options dummy numdummies=0 options ifb numifbs=0 options md_mod start_ro=1 options nct6683 force=1 options snd_atiixp_modem index=-2 options snd_intel8x0m index=-2 options snd_pcsp index=-2 options snd_via82xx_modem index=-2 options vfio_pci ids=1002:164e,1002:1640 ** Loaded modules: aesni_intel ahci amd_atl amdgpu amdxcp async_memcpy async_pq async_raid6_recov async_tx async_xor auth_rpcgss autofs4 binfmt_misc bluetooth bnep bridge btbcm btintel btmtk btrfs btrtl btusb button ccp cec configfs crc16 crc32c_cryptoapi crc_itu_t dm_crypt dm_mod drm drm_buddy drm_client_lib drm_display_helper drm_exec drm_kms_helper drm_panel_backlight_quirks drm_suballoc_helper drm_ttm_helper dummy ecdh_generic edac_mce_amd efi_pstore efivarfs evdev ext4 fat firewire_core firewire_sbp2 ghash_clmulni_intel gpio_amdpt gpio_generic gpu_sched grace hid hid_generic hkdf i2c_algo_bit i2c_dev i2c_piix4 i2c_smbus intel_rapl_common intel_rapl_msr ip_set ip_tables irqbypass jbd2 joydev k10temp kvm kvm_amd libahci libata libblake2b llc lockd loop lp mbcache mc md_mod msr nct6683 nf_conntrack nf_conntrack_netlink nf_defrag_ipv4 nf_defrag_ipv6 nf_nat nf_tables nfnetlink nfs_acl nfsd nft_chain_nat nft_compat nls_ascii nls_cp437 nvme nvme_auth nvme_core nvme_fabrics nvme_keyring overlay parport parport_pc pcspkr ppdev r8169 raid0 raid1 raid10 raid456 raid6_pq rapl rc_core realtek rfkill scsi_common scsi_mod sd_mod sg snd snd_hda_codec snd_hda_codec_alc882 snd_hda_codec_atihdmi snd_hda_codec_generic snd_hda_codec_hdmi snd_hda_codec_realtek_lib snd_hda_core snd_hda_intel snd_hrtimer snd_hwdep snd_intel_dspcfg snd_intel_sdw_acpi snd_mixer_oss snd_pcm snd_pcm_oss snd_rawmidi snd_seq snd_seq_device snd_seq_dummy snd_seq_midi snd_seq_midi_event snd_timer snd_usb_audio snd_usbmidi_lib soundcore sp5100_tco spd5118 squashfs stp sunrpc tap ttm tun uas uinput usb_common usb_storage usbcore usbhid veth vfat vfio vfio_iommu_type1 vfio_pci vfio_pci_core vhost vhost_iotlb vhost_net video watchdog wmi wmi_bmof x_tables xfrm_algo xfrm_user xhci_hcd xhci_pci xor xt_MASQUERADE xt_addrtype xt_conntrack xt_nat xt_set xt_tcpudp ** Out of tree modules: None found ** Network interface configuration: *** /etc/network/interfaces: auto lo iface lo inet loopback ** Network status: *** IP interfaces and addresses: 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host noprefixroute valid_lft forever preferred_lft forever 2: enp7s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel master br0 state UP group default qlen 1000 link/ether <redacted> brd ff:ff:ff:ff:ff:ff 3: enp9s0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc fq_codel state DOWN group default qlen 1000 link/ether <redacted> brd ff:ff:ff:ff:ff:ff 4: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether <redacted> brd ff:ff:ff:ff:ff:ff inet 192.168.23.4/24 brd 192.168.23.255 scope global dynamic noprefixroute br0 valid_lft 38597sec preferred_lft 38597sec inet6 fd40:ffff:ffff:ffff:45a4:d215:8df2:fff3/64 scope global mngtmpaddr noprefixroute valid_lft forever preferred_lft 604795sec inet6 fd40:ffff:ffff:ffff:a95a:3b11:e863:5786/64 scope global temporary dynamic valid_lft 172496sec preferred_lft 85528sec inet6 2a02:908:ffff:ffff:2f48:e5e9:df11:288a/64 scope global dynamic mngtmpaddr noprefixroute valid_lft 42sec preferred_lft 12sec inet6 2a02:908:ffff:ffff:13a6:4291:210a:aed1/64 scope global temporary dynamic valid_lft 42sec preferred_lft 12sec inet6 2a02:908:ffff:ffff::4/128 scope global dynamic noprefixroute valid_lft 42sec preferred_lft 12sec inet6 fd40:ffff:ffff:ffff::4/128 scope global dynamic noprefixroute valid_lft 43196sec preferred_lft 12sec inet6 fe80::<redacted>/64 scope link noprefixroute valid_lft forever preferred_lft forever 5: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default link/ether de:2f:ac:de:41:f6 brd ff:ff:ff:ff:ff:ff inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0 valid_lft forever preferred_lft forever inet6 fe80::<redacted>/64 scope link proto kernel_ll valid_lft forever preferred_lft forever 6: br-abaaa794b1f2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default link/ether <redacted> brd ff:ff:ff:ff:ff:ff inet 192.168.144.1/20 brd 192.168.159.255 scope global br-abaaa794b1f2 valid_lft forever preferred_lft forever 7: veth0bafe1e@if2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master docker0 state UP group default link/ether <redacted> brd ff:ff:ff:ff:ff:ff link-netnsid 0 inet6 fe80::<redacted>/64 scope link proto kernel_ll valid_lft forever preferred_lft forever 8: vnet0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br0 state UNKNOWN group default qlen 1000 link/ether <redacted> brd ff:ff:ff:ff:ff:ff inet6 fe80::<redacted>/64 scope link proto kernel_ll valid_lft forever preferred_lft forever *** Device statistics: Inter-| Receive | Transmit face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed lo: 35405668 40259 0 0 0 0 0 0 35405668 40259 0 0 0 0 0 0 enp7s0: 1240189847 1142556 0 0 0 0 0 2552 53711231 397194 0 2 0 0 0 0 enp9s0: 0 0 0 0 0 0 0 0 0 0 0 3 0 0 0 0 br0: 1003078054 651253 0 0 0 0 0 4228 50304274 344977 0 2 0 0 0 0 docker0: 12391575 226841 0 0 0 0 0 0 760259607 472961 0 13 0 0 0 0 br-abaaa794b1f2: 0 0 0 0 0 0 0 0 0 0 0 198 0 0 0 0 veth0bafe1e: 366610 3222 0 0 0 0 0 0 434640 3541 0 0 0 0 0 0 vnet0: 8124214 69766 0 0 0 0 0 0 206914540 127674 0 0 0 0 0 0 *** Protocol statistics: Ip: Forwarding: 1 806858 total packets received 2 with invalid addresses 696122 forwarded 0 incoming packets discarded 110729 incoming packets delivered 90950 requests sent out 9 dropped because of missing route 4 reassemblies required 2 packets reassembled ok 3 outgoing packets fragmented ok 6 fragments created OutTransmits: 787075 Icmp: 1 ICMP messages received 0 input ICMP message failed ICMP input histogram: destination unreachable: 1 1 ICMP messages sent 0 ICMP messages failed ICMP output histogram: destination unreachable: 1 IcmpMsg: InType3: 1 OutType3: 1 Tcp: 909 active connection openings 6 passive connection openings 12 failed connection attempts 38 connection resets received 12 connections established 204284 segments received 155988 segments sent out 191 segments retransmitted 0 bad segments received 645 resets sent Udp: 3879 packets received 1 packets to unknown port received 0 packet receive errors 2657 packets sent 0 receive buffer errors 0 send buffer errors IgnoredMulti: 4 UdpLite: TcpExt: 292 TCP sockets finished time wait in fast timer 663 delayed acks sent Quick ack mode was activated 45 times 27440 packet headers predicted 15105 acknowledgments not containing data payload received 23879 predicted acknowledgments TCPSackRecovery: 5 Detected reordering 264 times using SACK Detected reordering 4 times using time stamp 2 congestion windows fully recovered without slow start 1 congestion windows partially recovered using Hoe heuristic TCPDSACKUndo: 1 1 congestion windows recovered without slow start after partial ack TCPLostRetransmit: 131 21 fast retransmits 2 retransmits in slow start TCPTimeouts: 156 TCPLossProbes: 29 TCPLossProbeRecovery: 4 TCPBacklogCoalesce: 30 TCPDSACKOldSent: 45 TCPDSACKRecv: 12 160 connections reset due to unexpected data 30 connections reset due to early user close 13 connections aborted due to timeout TCPSACKDiscard: 7 TCPDSACKIgnoredNoUndo: 1 TCPSpuriousRTOs: 1 TCPSackMerged: 7 TCPSackShiftFallback: 157 TCPRcvCoalesce: 19852 TCPOFOQueue: 3304 TCPSpuriousRtxHostQueues: 1 TCPAutoCorking: 247 TCPFromZeroWindowAdv: 1 TCPToZeroWindowAdv: 1 TCPOrigDataSent: 56599 TCPHystartDelayDetect: 2 TCPHystartDelayCwnd: 76 TCPKeepAlive: 212 TCPDelivered: 57200 TCPAckCompressed: 2711 TcpTimeoutRehash: 143 TCPDSACKRecvSegs: 5 TCPDSACKIgnoredDubious: 7 IpExt: InMcastPkts: 987 OutMcastPkts: 894 InBcastPkts: 208 OutBcastPkts: 181 InOctets: 892253429 OutOctets: 826003180 InMcastOctets: 220618 OutMcastOctets: 218301 InBcastOctets: 38484 OutBcastOctets: 31470 InNoECTPkts: 1109263 InECT0Pkts: 8 MPTcpExt: -- System Information: Debian Release: 13.5 APT prefers stable-updates APT policy: (600, 'stable-updates'), (600, 'stable-security'), (600, 'stable-debug'), (600, 'proposed-updates-debug'), (600, 'proposed-updates'), (600, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 7.0.4+deb13-amd64 (SMP w/16 CPU threads; PREEMPT) Locale: LANG=en_DE.UTF-8, LC_CTYPE=en_DE.UTF-8 (charmap=UTF-8), LANGUAGE=en_US Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages linux-image-7.0.4+deb13-amd64 depends on: ii initramfs-tools [linux-initramfs-tool] 0.148.4 ii linux-base 4.12.1 ii linux-base-7.0.4+deb13-amd64 7.0.4-1~bpo13+1 ii linux-binary-7.0.4+deb13-amd64 7.0.4-1~bpo13+1 ii linux-modules-7.0.4+deb13-amd64 7.0.4-1~bpo13+1 Versions of packages linux-image-7.0.4+deb13-amd64 recommends: ii apparmor 4.1.0-1 Versions of packages linux-image-7.0.4+deb13-amd64 suggests: ii debian-kernel-handbook 1.0.21 ii extlinux 3:6.04~git20190206.bf6db5b4+dfsg1-3.1 ii firmware-linux-free 20241210-2 ii grub-efi-amd64 2.12-9+deb13u2 ii linux-doc-7.0 7.0.4-1~bpo13+1 Versions of packages linux-image-7.0.4+deb13-amd64 is related to: pn firmware-amd-graphics <none> pn firmware-atheros <none> pn firmware-bnx2 <none> pn firmware-bnx2x <none> pn firmware-brcm80211 <none> pn firmware-cavium <none> pn firmware-cirrus <none> pn firmware-intel-graphics <none> pn firmware-intel-misc <none> pn firmware-intel-sound <none> pn firmware-ipw2x00 <none> pn firmware-ivtv <none> pn firmware-iwlwifi <none> pn firmware-libertas <none> pn firmware-marvell-prestera <none> pn firmware-mediatek <none> ii firmware-misc-nonfree 20250410-2 pn firmware-myricom <none> pn firmware-netronome <none> pn firmware-netxen <none> pn firmware-nvidia-graphics <none> pn firmware-qcom-soc <none> pn firmware-qlogic <none> ii firmware-realtek 20250410-2 pn firmware-samsung <none> pn firmware-siano <none> pn firmware-ti-connectivity <none> pn xen-hypervisor <none> -- no debconf information
