Fix a possible crash due to PyType_FromSpecWithBases() (GH-10304)

If the PyObject_MALLOC() call failed in PyType_FromSpecWithBases(),
PyObject_Free() would be called on a static string in type_dealloc().