diff --git a/src/agent/rustjail/src/validator.rs b/src/agent/rustjail/src/validator.rs
index 86e04830d9..53e05a45b4 100644
--- a/src/agent/rustjail/src/validator.rs
+++ b/src/agent/rustjail/src/validator.rs
@@ -207,6 +207,11 @@ fn sysctl(oci: &Spec) -> Result<()> {
             }
         }
 
+        if key.starts_with("net.") {
+            // the network ns is shared with the guest, don't expect to find it in spec
+            continue;
+        }
+
         if contain_namespace(&linux.namespaces, "uts") {
             if key == "kernel.domainname" {
                 continue;