vdpa/mlx5: fix wrong list iterated in add_direct_chain error path (CVE-2026-90128) | HOL Guard CVE