r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r2, 0x0, r1, 0x0, 0x2, 0x0)