fexecve: don't leak fd on fexecve(2) failure; close before calling err

MFC after: 3 days
Reported by: Coverity
CID: 978285