Backport of nsutil: wrap error that comes from the syscall so caller can do errors.As into release/1.9.x

Backport of nsutil: wrap error that comes from the syscall so caller can do errors.As into release/1.9.x #16418