9p: move dereference after NULL check