League leaders Madrid were upset Espanyol defender Carlos Romero avoided a red card for hacking down striker Kylian Mbappe and went on to score the winning goal.