panic: timeout_add: to_ticks (-458521669) < 0
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*331451  97858      0      0x1000  0x4080000    0  syz-executor.0
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:399
panic() at panic+0x15c sys/kern/subr_prf.c:208
timeout_add(ffff800000669260,e4ab83bb) at timeout_add+0x179 sys/kern/kern_timeout.c:190
pcppi_bell(ffff800000669200,8b884caf,e4ab83bb,1) at pcppi_bell+0x2a0 sys/dev/isa/pcppi.c:234
spkrioctl(1b00,20005302,ffff800014a347f0,2,ffff80001495dc30) at spkrioctl+0x230 tone sys/dev/isa/spkr.c:89 [inline]
spkrioctl(1b00,20005302,ffff800014a347f0,2,ffff80001495dc30) at spkrioctl+0x230 sys/dev/isa/spkr.c:503
VOP_IOCTL(fffffd802cd19d60,20005302,ffff800014a347f0,2,fffffd803f7c7840,ffff80001495dc30) at VOP_IOCTL+0x9a sys/kern/vfs_vops.c:290
vn_ioctl(fffffd80361e0e18,20005302,ffff800014a347f0,ffff80001495dc30) at vn_ioctl+0xc9 sys/kern/vfs_vnops.c:512
sys_ioctl(ffff80001495dc30,ffff800014a34938,ffff800014a34920) at sys_ioctl+0x62d
syscall(ffff800014a349d0) at syscall+0x535
Xsyscall(6,0,ffffffffffffff88,0,3,2435abe2010) at Xsyscall+0x128
end of kernel
end trace frame: 0x24627eb23f0, count: 5
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.