ipset v6.19: Set cannot be destroyed: it is in use by a kernel component\n

[shiliang]

juno openstack environment:

nstack/common/lockutils.py:210
2017-06-12 10:27:48.834 1618 DEBUG neutron.openstack.common.lockutils [-] Semaphore / lock released "destroy_ipset_chain_by_name" inner /usr/lib/python2.7/site-packages/neutron/openstack/common/lockutils.py:252
2017-06-12 10:27:48.977 1618 ERROR neutron.agent.firewall_agent [-] Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/neutron/agent/firewall_agent.py", line 183, in daemon_loop
    self.sg_agent.remove_devices_filter(devices_deleted)
  File "/usr/lib/python2.7/site-packages/neutron/agent/securitygroups_rpc.py", line 392, in remove_devices_filter
    sg_router.remove_port_filter(device)
  File "/usr/lib64/python2.7/contextlib.py", line 24, in __exit__
    self.gen.next()
  File "/usr/lib/python2.7/site-packages/neutron/agent/firewall.py", line 106, in defer_apply
    self.filter_defer_apply_off()
  File "/usr/lib/python2.7/site-packages/neutron/agent/linux/iptables_firewall.py", line 592, in filter_defer_apply_off
    self._remove_unused_security_group_info()
  File "/usr/lib/python2.7/site-packages/neutron/agent/linux/iptables_firewall.py", line 578, in _remove_unused_security_group_info
    self.ipset.destroy_ipset_chain_by_name(removed_chain)
  File "/usr/lib/python2.7/site-packages/neutron/openstack/common/lockutils.py", line 249, in inner
    return f(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/neutron/agent/linux/ipset_manager.py", line 57, in destroy_ipset_chain_by_name
    self._destroy_ipset_chain(chain_name)
  File "/usr/lib/python2.7/site-packages/neutron/agent/linux/ipset_manager.py", line 82, in _destroy_ipset_chain
    self._apply(cmd)
  File "/usr/lib/python2.7/site-packages/neutron/agent/linux/ipset_manager.py", line 67, in _apply
    process_input=input)
  File "/usr/lib/python2.7/site-packages/neutron/agent/linux/utils.py", line 84, in execute
    raise RuntimeError(m)
RuntimeError:
Command: ['sudo', 'neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'ipset', 'destroy', 'IPv44daae9b4-57c2-4b6e-a']
Exit code: 1
Stdout: ''
Stderr: 'ipset v6.19: Set cannot be destroyed: it is in use by a kernel component\n'

when I query ipset IPv44daae9b4-57c2-4b6e-a,find that:

[root@controller ~]# ipset list
Name: IPv44daae9b4-57c2-4b6e-a
Type: hash:ip
Revision: 1
Header: family inet hashsize 1024 maxelem 65536
Size in memory: 16576
References: 2
Members:
172.16.28.221
172.16.28.222

[Brian Haley (brian-haley)]

Can you reproduce this on anything newer than Juno? We no longer maintain it upstream.

[Brian Haley (brian-haley)]

Should have mentioned - Newton or Ocata or master branch would be better as they are current.