msm: ipa: fix freeing memory that was already freed

During SSR, if ipa_tag_process is returning with timeout,
there is a free for user1 field of the descriptors. however this
user1 field will be freed again when the ipa_free_buffer callback
will be called.
There is no need to free the user1 field in the descriptor in case
of timeout from ipa_tag_process.

Change-Id: Iee9990944cb573e077744d3454984f53fe23c5dc
Signed-off-by: Sivan Reinstein <sivanr@codeaurora.org>