[IPSEC] Fix refcnt leak in xfrm_lookup

This patch fixes a refcnt leak when the policy changes on us in
xfrm_lookup.

net/xfrm/xfrm_policy.c

@@ -790,9 +790,11 @@ int xfrm_lookup(struct dst_entry **dst_p, struct flowi *fl,
 					goto error;
 				}
 				if (err == -EAGAIN ||
-				    genid != atomic_read(&flow_cache_genid))
+				    genid != atomic_read(&flow_cache_genid)) {
+					xfrm_pol_put(policy);
 					goto restart;
 				}
+			}
 			if (err)
 				goto error;
 		} else if (nx == 0) {