dup3: don't set FD_CLOEXEC on failure on kernels without dup3 syscall