4319dfc0ae
The initial bootstrap init (started directly by the kernel) has no ns_fd in its dynamic proc info. setrens(0,0) calls mkns which needs a current_namespace_fd() — this returns ENOENT and panics. Replace the .expect() with a graceful fallback: log a warning and continue with the full scheme set. This lets init function even when the null namespace cannot be created (e.g. when the bootstrap initnsmgr daemon isn't running). The null namespace is a hardening feature, not a correctness requirement. Init can still spawn daemons and manage the system without it.