Fixed a dumb double destroy in init() on OOM, thanks to asn.