xdp bugfix: avoid buffer leak opportunity

I had looked at this case before but I didn't see the problem;
fortunately Dan pointed me to it again.

When we bail out due to error, we can't just __release the indices
that we haven't processed; they would need to do at least
kxsk_dealloc_umem_frame()