Fixes memory leak in namec()

I neglected to free e.off when skipping the namelenerror.
diff --git a/kern/src/ns/chan.c b/kern/src/ns/chan.c
index 79e6ff8..fee27b5 100644
--- a/kern/src/ns/chan.c
+++ b/kern/src/ns/chan.c
@@ -1277,6 +1277,7 @@
 		cclose(c);
 		kfree(e.name);
 		kfree(e.elems);
+		kfree(e.off);
 		/* brho: skipping the namec custom error string business, since it hides
 		 * the underlying failure.  comment out nexterror if you want the old
 		 * stuff.  */
@@ -1296,7 +1297,6 @@
 				   e.nelems, aname, e.off[0], e.off[1]);
 		}
 		len = e.prefix + e.off[e.nerror];
-		kfree(e.off);
 		namelenerror(aname, len, tmperrbuf);
 		nexterror();
 	}