ipcns: fix use after free in free_ipc_ns()