xen/evtchn: double free on error