tsync: unlock mutex on failure

Testing the there-is-no-seccomp case showed the children need to
unlock on fatal errors.

Signed-off-by: Kees Cook <keescook@chromium.org>