vfs: fix nd->root leak in do_filp_open()