net/tap: fix fd leak on creation failure