do_last(): fetch directory ->i_mode and ->i_uid before it's too late

commit d0cb5018 upstream.

may_create_in_sticky() call is done when we already have dropped the
reference to dir.

Fixes: 30aba665

 (namei: allow restricted O_CREAT of FIFOs and regular files)
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>