Kernel and userspace incompatible: settype hash:ip with revision 6 not supported

[wu-yafeng]

Cannot install calico node on Ubuntu 24.04.1 LTS

kubectl logs calico-node-9qbzx -n calico-system

25-07-15 08:54:52.832 [ERROR][546413] felix/ipsets.go 671: Bad return code from 'ipset list cali40this-host'. error=exit status 1 family="inet" stderr="ipset v7.11: Kernel and userspace incompatible: settype hash:ip with revision 6 not supported by userspace.\n"

2025-07-15 08:54:52.832 [ERROR][546413] felix/ipsets.go 422: Failed to parse ipset cali40this-host error=exit status 1 family="inet"

Expected Behavior

calico node should running with healthy status.

Current Behavior

calico node is unhealthy.

Possible Solution

Steps to Reproduce (for bugs)

1. mkdir -p /etc/rancher/rke2/
   2.cat >/etc/rancher/rke2/config.yaml <<EOL
   token: 123456
   system-default-registry: registry.cn-hangzhou.aliyuncs.com
   cni: calico
   EOL
2. curl -sfL https://rancher-mirror.rancher.cn/rke2/install.sh |
   INSTALL_RKE2_MIRROR=cn sh -
3. systemctl start rke2-server.service

Context

Your Environment

helm list -A

NAME                            NAMESPACE       REVISION        UPDATED                                 STATUS          CHART                                   APP VERSION
rke2-calico                     kube-system     2               2025-07-14 06:12:02.82005339 +0000 UTC  deployed        rke2-calico-v3.30.100                   v3.30.1

rke2 -v

ipset v7.19, protocol version: 7
root@myubuntu:~# rke2 -v
rke2 version v1.32.6+rke2r1 (54f49419945b6f2956d03973c1e8f287f47905b1)
go version go1.23.10 X:boringcrypto

run ipset -v on host

root@myubuntu:~# ipset -v
ipset v7.19, protocol version: 7
root@myubuntu:~# ipset list
Name: cali40this-host
Type: hash:ip
Revision: 6
Header: family inet hashsize 1024 maxelem 1048576 bucketsize 12 initval 0x81fa1b37
Size in memory: 376
References: 0
Number of entries: 4
Members:
127.0.0.0
172.30.81.137
127.0.0.1
10.42.0.0

Name: cali40all-ipam-pools
Type: hash:net
Revision: 7
Header: family inet hashsize 1024 maxelem 1048576 bucketsize 12 initval 0x00c9dd58
Size in memory: 504
References: 0
Number of entries: 1
Members:
192.168.0.0/16

Name: cali40masq-ipam-pools
Type: hash:net
Revision: 7
Header: family inet hashsize 1024 maxelem 1048576 bucketsize 12 initval 0x6cabeefb
Size in memory: 504
References: 0
Number of entries: 1
Members:
192.168.0.0/16

run ipset -v in pods

sh-4.4# ipset -v
ipset v7.11, protocol version: 7
sh-4.4# ipset list
ipset v7.11: Kernel and userspace incompatible: settype hash:ip with revision 6 not supported by userspace

[mazdakn]

@wu-yafeng what version of Calico are you using? This is a bug that was fixed in a previous version of Calico.

[wu-yafeng]

rke2 version: v1.32.6+rke2r1

I'm not sure, may be Calico version: v3.30.100 ?

Chart: rke2-calico-v3.30.100

[mazdakn]

Strange. How did you install Calico?

[wu-yafeng]

I installed rke2, rke2 will install Calico automatically.