install/57473: 9.3-RELEASE/amd64 base - mtree checksum mismatch usr/lib/i386/libkadm5srv.so.15.0

[hpaluch%seznam.cz@localhost]

>Number:         57473
>Category:       install
>Synopsis:       9.3-RELEASE/amd64 base - mtree checksum mismatch usr/lib/i386/libkadm5srv.so.15.0
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    install-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Jun 18 15:15:00 +0000 2023
>Originator:     Henryk Paluch
>Release:        9.3-RELEASE from NetBSD-9.3-amd64.iso
>Organization:
N/A
>Environment:
NetBSD netbsd-vm 9.3 NetBSD 9.3 (GENERIC) #0: Thu Aug  4 15:30:37 UTC 2022  mkrepro%mkrepro.NetBSD.org@localhost:/usr/src/sys/arch/amd64/compile/GENERIC amd64
>Description:
When verifying mtree of base.tar.xz set in 9.3-RELEASE there is reported single file mismatch (1st hash is expected, 2nd is found):

usr/lib/i386/libkadm5srv.so.15.0: 
        sha256 (0xa6bc0eba3aa08db46f668ad10e6002feb62273b23ce020c86ec8b8f394680d2d, 0x5a99994d8af8c44d6a558267ea1a0e0fe3906b0bc3902be1656272b4347f5399)

>How-To-Repeat:
Here is example how you can reproduce problem independent of installation (so we can rule out file corruption on extraction).

Requirements:
- curl package installed
- doas package installed and configured to allow to become root

How to reproduce:

cd
curl -fLO http://cdn.netbsd.org/pub/NetBSD/NetBSD-9.3/amd64/binary/sets/base.tar.xz
curl -fLO http://cdn.netbsd.org/pub/NetBSD/NetBSD-9.3/amd64/binary/sets/MD5
grep -w base.tar.xz MD5 > MD5.base

# NOTE: MD5.base contains: MD5 (base.tar.xz) = 1ca2d3cc3d057eb6880da34a2b8012dc

md5 -c MD5.base # no error reported
mkdir -p unpack
doas tar xpf base.tar.xz -C unpack
cd unpack && doas mtree -e -f etc/mtree/set.base

usr/lib/i386/libkadm5srv.so.15.0: 
        sha256 (0xa6bc0eba3aa08db46f668ad10e6002feb62273b23ce020c86ec8b8f394680d2d, 0x5a99994d8af8c44d6a558267ea1a0e0fe3906b0bc3902be1656272b4347f5399)

This behaviour was tested on 2 different NetBSD 9.3 installations - one VM under Linux/KVM another one bare-metal with same results.
>Fix:
Unknown.

However found two similar reports, but for other NetBSD versions and sometimes other libraries:

https://gnats.netbsd.org/cgi-bin/query-pr-single.pl?number=56136
https://gnats.netbsd.org/cgi-bin/query-pr-single.pl?number=56896