sch_tbf: fix two null pointer dereferences on init failure