panic: timeout_add: to_ticks (-1) < 0 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 288124 5620 0 0 0 0 syz-executor.0 *410516 5620 0 0 0x4000000 1K syz-executor.0 db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:399 panic() at panic+0x174 sys/kern/subr_prf.c:208 timeout_add(ffff80000066d060,ffffffff) at timeout_add+0x194 sys/kern/kern_timeout.c:190 pcppi_bell(ffff80000066d000,fffffffc,ffffffff,1) at pcppi_bell+0x2a0 sys/dev/isa/pcppi.c:234 spkrioctl(1b00,80085301,ffff800020c2af30,2,ffff800020b43080) at spkrioctl+0x123 tone sys/dev/isa/spkr.c:89 [inline] spkrioctl(1b00,80085301,ffff800020c2af30,2,ffff800020b43080) at spkrioctl+0x123 sys/dev/isa/spkr.c:489 VOP_IOCTL(fffffd807debcc88,80085301,ffff800020c2af30,2,fffffd807f7c7a20,ffff800020b43080) at VOP_IOCTL+0x9a sys/kern/vfs_vops.c:290 vn_ioctl(fffffd807e624c00,80085301,ffff800020c2af30,ffff800020b43080) at vn_ioctl+0xc9 sys/kern/vfs_vnops.c:512 sys_ioctl(ffff800020b43080,ffff800020c2b078,ffff800020c2b060) at sys_ioctl+0x646 syscall(ffff800020c2b110) at syscall+0x5ac mi_syscall sys/sys/syscall_mi.h:99 [inline] syscall(ffff800020c2b110) at syscall+0x5ac sys/arch/amd64/amd64/trap.c:574 Xsyscall(6,0,ffffffffffffff88,0,3,38f06af4010) at Xsyscall+0x128 end of kernel end trace frame: 0x391eb47e030, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs.