CVE-2025-38387 RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert