> This problem was fixed with revision 1.303 of vfs_syscalls.c.  It was
> caused by trying to fchdir() to a non-directory or to a directory without
> executed permissions.  netbsd-4 is also affected, I'll submit a pullup.

Many zillions of thanks for digging this out. (And to Greg Oster, too.)