[PATCH 4.9 138/191] ip_tunnel: fix use-after-free in ip_tunnel_lookup()