blk-mq: fix double-free in error path