af_packet: fix freeing pg_vec twice on error path