qfq: don't leak skb if kzalloc fails