iris: handle os_dupfd_cloexec failure