connect: no do not leak descriptors on failure