Fix double free caused by incorrect talloc_steal usage.