[PATCH OLK-5.10] selinux: fix potential counting error in avc_add_xperms_decision()