r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0xd4f, 0x1}}) syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x400201) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x7ce4, &(0x7f0000000140)={0x0, 0xb499, 0x8, 0x0, 0x298}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(r1, 0x0, 0x0, 0xffffffff) msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/199) r2 = syz_open_dev$loop(0x0, 0x4, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000400)) mmap$IORING_OFF_SQES(&(0x7f0000fec000/0x12000)=nil, 0x12000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x10000000) semctl$SEM_INFO(0x0, 0x1, 0x13, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, 0x0)