In case ensure_namespace fails for any reason, the ip_wrapper attribute is not created but destroy(), that uses this attribute, is still called. TrivialFix Change-Id: I4135f6564a180b4bd275312866d3dc6e4b9b63ca