jail: netifd: check target netns fd before using it