xen-netfront: call netif_carrier_off() only once when disconnecting