Thanks for the problem report.  I'm not going to be in a position to start looking into this until late Sunday, but hopefully it will be a quick fix.

Two quick questions (my apologies, I'm not able to dig through your logs right now): do you see this leak on kernels < 3.5.0, and are you using any labeled IPsec connections?

--
paul moore
www.paul-moore.com