RDMA/mlx5: Fix undefined shift of user RQ WQE size (CVE-2026-74297) | HOL Guard CVE