Allow egress network policy not working after denying all egress/ingress policy.

Create a network policy for denay all default:
~~~
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: deny-by-egress
  namespace: test
spec:
  podSelector: {}
  policyTypes:
  - Egress
  - Ingress
~~~

And then allow egress to the default namespace will not work.
~~~
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: allow-egress-default
  namespace: test
spec:
  egress:
    - to:
       - namespaceSelector:
           matchLabels:
             kubernetes.io/metadata.name: default
  policyTypes:
  - Egress
~~~

1.
2.
3.