In mlx4_ib_create_srq(), when ib_copy_to_udata() fails after
mlx4_srq_alloc() succeeds, the goto jumps to err_wrid which
frees DB/wrid but never calls mlx4_srq_free(), leaking the SRQ.
Introduce err_srq label with mlx4_srq_free() before err_wrid,
maintaining correct cleanup order.
Patch by Haoxiang Li.
Bug: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295684