panic: attempt to execute user address 0x20fee000 in supervisor mode
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
* 29298  96313      0           0  0x4000000    1K syz-executor.1
  76667  59438      0           0          0    0  syz-executor.0
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic() at panic+0x15c sys/kern/subr_prf.c:207
pageflttrap() at pageflttrap+0x40b
kerntrap(ffff800022d698e0) at kerntrap+0xec sys/arch/amd64/amd64/trap.c:287
alltraps_kern_meltdown(6,ffff800021b5e000,fffffd8066bd0628,10,ffff800000025320,ffff800022d69b48) at alltraps_kern_meltdown+0x7b
__kernel_end_phys(b,ffff800022d69aa8,83,ffff800022d69b48,0,b) at 0x20fee000
rt_clone(ffff800022d69bb8,fffffd806f6ce710,0) at rt_clone+0x78 sys/net/route.c:266
rtalloc_mpath(fffffd806f6ce710,0,0) at rtalloc_mpath+0xba rt_match sys/net/route.c:244 [inline]
rtalloc_mpath(fffffd806f6ce710,0,0) at rtalloc_mpath+0xba sys/net/route.c:359
in_pcbselsrc(ffff800022d69c90,fffffd8062920c20,fffffd806f6ce690) at in_pcbselsrc+0x219 sys/netinet/in_pcb.c:934
in_pcbconnect(fffffd806f6ce690,fffffd8062920c00) at in_pcbconnect+0x107 sys/netinet/in_pcb.c:492
udp_usrreq(fffffd807d359d90,4,0,fffffd8062920c00,0,ffff800020abf160) at udp_usrreq+0x560
sys_connect(ffff800020abf160,ffff800022d69e18,ffff800022d69e60) at sys_connect+0x3df sys/kern/uipc_syscalls.c:388
syscall(ffff800022d69ee0) at syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:92 [inline]
syscall(ffff800022d69ee0) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:555
Xsyscall(6,0,fffffffffffffecf,0,3,de095ebe010) at Xsyscall+0x128
end of kernel
end trace frame: 0xde314dbe0b0, count: 1
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.