lib/tun.c: Proper cleanup during tun_new() error paths