CVE-2026-23191 ALSA: aloop: Fix racy access at PCM trigger