Lenovo ThinkPad T450 panic in vm_freelist_rem()

Hello and happy new year.

The laptop is running:
> uname -a
FreeBSD NomadBSD 14.0-CURRENT FreeBSD 14.0-CURRENT #0 e9016c0be: Sun Jan  2
04:27:33 CET 2022     root@NomadBSD:/usr/obj/usr/src/amd64.amd64/sys/GENERIC
 amd64

The backtrace command shows:
#0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55
#1  doadump (textdump=textdump@entry=0) at
/usr/src/sys/kern/kern_shutdown.c:399
#2  0xffffffff804c590a in db_dump (dummy=<optimized out>,
dummy2=<unavailable>, dummy3=<unavailable>, dummy4=<unavailable>) at
/usr/src/sys/ddb/db_command.c:575
#3  0xffffffff804c57c2 in db_command (last_cmdp=<optimized out>,
cmd_table=<optimized out>, dopager=dopager@entry=1) at
/usr/src/sys/ddb/db_command.c:482
#4  0xffffffff804c541d in db_command_loop () at
/usr/src/sys/ddb/db_command.c:535
#5  0xffffffff804c8a56 in db_trap (type=<optimized out>, code=<optimized
out>) at /usr/src/sys/ddb/db_main.c:270
#6  0xffffffff80c4e63b in kdb_trap (type=type@entry=3, code=code@entry=0,
tf=tf@entry=0xfffffe00fc7ae970) at /usr/src/sys/kern/subr_kdb.c:733
#7  0xffffffff810c695a in trap (frame=0xfffffe00fc7ae970) at
/usr/src/sys/amd64/amd64/trap.c:609
#8  <signal handler called>
#9  kdb_enter (why=0xffffffff812c3774 "panic", msg=<optimized out>) at
/usr/src/sys/kern/subr_kdb.c:506
#10 0xffffffff80c00d30 in vpanic (fmt=0xffffffff812b6aa3 "Bad link elm %p
next->prev != elm", ap=ap@entry=0xfffffe00fc7aead0) at
/usr/src/sys/kern/kern_shutdown.c:908
#11 0xffffffff80c00ac3 in panic (fmt=0xffffffff81e8cea0 <cnputs_mtx>
"\223\002(\201\377\377\377\377") at /usr/src/sys/kern/kern_shutdown.c:844
#12 0xffffffff80f8376a in vm_freelist_rem (fl=0xffffff660cc45778, m=0x80,
order=0) at /usr/src/sys/vm/vm_phys.c:390
#13 vm_phys_free_pages (m=0xfffffe0002ad8ac8, order=order@entry=0) at
/usr/src/sys/vm/vm_phys.c:1124
#14 0xffffffff80f7b7ac in vm_page_zone_release (arg=<optimized out>,
store=0xfffff80001783010, cnt=188) at /usr/src/sys/vm/vm_page.c:2596
#15 0xffffffff80f55a4d in bucket_drain (zone=zone@entry=0xfffffe0019861800,
bucket=<optimized out>, bucket@entry=0xfffff80001783000) at
/usr/src/sys/vm/uma_core.c:1363
#16 0xffffffff80f50936 in bucket_free (zone=0xfffffe0019861800,
bucket=0xfffff80001783000, udata=0x0) at /usr/src/sys/vm/uma_core.c:521
#17 zone_put_bucket (zone=0xfffffe0019861800, zone@entry=0xfffff80001783000,
domain=<optimized out>, bucket=0xfffff80001783000, bucket@entry
=0xfffffe0105017560,
    udata=udata@entry=0x0, ws=false) at /usr/src/sys/vm/uma_core.c:904
#18 0xffffffff80f57823 in zone_free_bucket (zone=zone@entry=0xfffffe0019861800,
bucket=bucket@entry=0xfffff80001783000, udata=udata@entry=0x0,
    itemdomain=itemdomain@entry=0, ws=<optimized out>) at
/usr/src/sys/vm/uma_core.c:4643
#19 0xffffffff80f51091 in cache_free (zone=zone@entry=0xfffffe0019861800,
cache=<optimized out>, udata=udata@entry=0x0, itemdomain=1, itemdomain@entry
=0)
    at /usr/src/sys/vm/uma_core.c:4710
#20 0xffffffff80f4fec8 in uma_zfree_arg (zone=0xfffffe0019861800,
item=0xfffffe0007970ca0, item@entry=0xfffffe0007970c38, udata=udata@entry
=0x0)
    at /usr/src/sys/vm/uma_core.c:4514
#21 0xffffffff80f73515 in uma_zfree (zone=0xffffffff81e8cea0 <cnputs_mtx>,
item=<optimized out>) at /usr/src/sys/vm/uma.h:404
#22 0xffffffff80f7348b in vm_page_free (m=0xffffffff81e8cea0 <cnputs_mtx>)
at /usr/src/sys/vm/vm_page.c:1330
#23 0xffffffff80f6d66d in vm_object_terminate_pages
(object=0xfffff8012e589108) at /usr/src/sys/vm/vm_object.c:907
#24 vm_object_terminate (object=object@entry=0xfffff8012e589108) at
/usr/src/sys/vm/vm_object.c:958
#25 0xffffffff80f6d37d in vm_object_deallocate (object=0xfffff8012e589108)
at /usr/src/sys/vm/vm_object.c:693
#26 0xffffffff80f5f309 in vm_map_entry_deallocate
(entry=0xfffff8012e5fb420, system_map=0) at /usr/src/sys/vm/vm_map.c:3813
#27 vm_map_process_deferred () at /usr/src/sys/vm/vm_map.c:613
#28 0xffffffff80f66aa9 in _vm_map_unlock (map=<optimized out>, line=4002,
file=<optimized out>) at /usr/src/sys/vm/vm_map.c:676
#29 vm_map_remove (map=<optimized out>, map@entry=0xfffffe01056713f0,
start=4096, end=<optimized out>) at /usr/src/sys/vm/vm_map.c:4002
#30 0xffffffff80f5edf9 in vmspace_dofree (vm=0xfffffe01056713f0) at
/usr/src/sys/vm/vm_map.c:382
#31 vmspace_exit (td=td@entry=0xfffffe0105017560) at
/usr/src/sys/vm/vm_map.c:457
#32 0xffffffff80bb2fe8 in exit1 (td=<optimized out>, rval=<optimized out>,
signo=signo@entry=0) at /usr/src/sys/kern/kern_exit.c:421
#33 0xffffffff80bb2a8d in sys_exit (td=0xffffffff81e8cea0 <cnputs_mtx>,
uap=<optimized out>) at /usr/src/sys/kern/kern_exit.c:212
#34 0xffffffff810c771e in syscallenter (td=<optimized out>) at
/usr/src/sys/amd64/amd64/../../kern/subr_syscall.c:189
#35 amd64_syscall (td=0xfffffe0105017560, traced=0) at
/usr/src/sys/amd64/amd64/trap.c:1191
#36 <signal handler called>
#37 0x000000080848d1fa in ?? ()
Backtrace stopped: Cannot access memory at address 0x7fffffffe848

I can share the /var/crash directory if needed.

Regards
--
Maurizio