panic: Data modified on freelist: word 6 of object 0xffff80000159f580 size 0x20 previous type UVM amap (0x6aaa413c != 0xdeaf4152)

Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*195267  56353      0      0x1044          0    0K syz-executor
 109090  34966     -1        0x10          0    1  syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff8348d9a1) at panic+0x1e5 sys/kern/subr_prf.c:198
malloc(20,62,a) at malloc+0xdb6 sys/kern/kern_malloc.c:357
amap_alloc1(100,2,1) at amap_alloc1+0x291 sys/uvm/uvm_amap.c:356
amap_alloc(100000,2,1) at amap_alloc+0xad sys/uvm/uvm_amap.c:-1
amap_copy(fffff8806f0a0010,fffff8806cf09758,2,0,7e773e2fe000,7e773e2fe001) at amap_copy+0x6a8 sys/uvm/uvm_amap.c:570
uvm_fault_check(ffff80002a2ab660,ffff80002a2ab698,ffff80002a2ab6d0,0) at uvm_fault_check+0x473 sys/uvm/uvm_fault.c:747
uvm_fault(fffff8806f0a0010,7e773e2fe000,0,2) at uvm_fault+0x106 sys/uvm/uvm_fault.c:627
kpageflttrap(ffff80002a2ab810,7e773e2feb00) at kpageflttrap+0x2f4 sys/arch/amd64/amd64/trap.c:285
kerntrap(ffff80002a2ab810) at kerntrap+0x19d sys/arch/amd64/amd64/trap.c:532
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
copyout() at copyout+0x64
sys_execve(ffff80002a367a18,ffff80002a2abfa0,ffff80002a2abef0) at sys_execve+0x1233 sys/kern/kern_exec.c:569
syscall(ffff80002a2abfa0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a2abfa0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:791
end trace frame: 0xffff80002a2ac020, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: Data modified on freelist: word 6 of object 0xffff80000159f580 size 0x20 previous type UVM amap (0x6aaa413c != 0xdeaf4152)

ddb{0}> show kasan
No such command
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff8348d9a1) at panic+0x1e5 sys/kern/subr_prf.c:198
malloc(20,62,a) at malloc+0xdb6 sys/kern/kern_malloc.c:357
amap_alloc1(100,2,1) at amap_alloc1+0x291 sys/uvm/uvm_amap.c:356
amap_alloc(100000,2,1) at amap_alloc+0xad sys/uvm/uvm_amap.c:-1
am