fusefs: fix "returning with lock held" panics in fuse_vnode_alloc

These panics all lie in the error path. The only one I've hit is caused by
a buggy FUSE server unexpectedly changing the type of a vnode.

Sponsored by: The FreeBSD Foundation