sch_tbf: Fix potential memory leak in tbf_change().