add missing call to fdrop() in poll_uninstall()

bug fix: a reference is held by fget(), make sure to release a refcount