Na'vi or Knave: Jailbreaking Language Models via Metaphorical Avatars