ntb: iounmap MW reg and vbase in error path

The MW regbase and vbase(s) were not being freed if an error occurred
in the vbase allocation loop. This is corrected by updating the error
path for the allocation loop to err4.

Reported-by: Julia Lawall <[e-mail]>
Signed-off-by: Jon Mason <[e-mail]>

drivers/ntb/ntb_hw.c

···
 			dev_warn(&pdev->dev, "Cannot remap BAR %d\n",
 				 MW_TO_BAR(i));
 			rc = -EIO;
-			goto err3;
+			goto err4;
 		}
 	}