bin/60606: assert fail in named in NetBSD 11.0_STABLE on a earmv7hf system

["brad%anduin.eldar.org@localhost via gnats" <gnats-admin%NetBSD.org@localhost>]

>Number:         60606
>Category:       bin
>Synopsis:       assert fail in named in NetBSD 11.0_STABLE on a earmv7hf system
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Aug 17 01:35:00 +0000 2026
>Originator:     brad%anduin.eldar.org@localhost
>Release:        NetBSD 11.0_STABLE
>Organization:
	eldar.org
>Environment:
System: NetBSD isengard.nat.eldar.org 11.0_STABLE NetBSD 11.0_STABLE (ISENGARD) #0: Tue Aug  4 12:56:20 EDT 2026  brad%samwise.nat.eldar.org@localhost:/usr/src/sys/arch/evbarm/compile/ISENGARD evbarm
Architecture: earmv7hf
Machine: evbarm
>Description:
Assert failure when doing a zone transfer on earmv7hf
>How-To-Repeat:

Set up a slave zone transfer using the in system bind on NetBSD
11.0_STABLE on a earmv7hf system and you might just get this in
/var/log/messages:

Aug 16 21:10:39 isengard named[10350]: all zones loaded
Aug 16 21:10:39 isengard named[10350]: FIPS mode is disabled
Aug 16 21:10:39 isengard named[10350]: running
Aug 16 21:10:39 isengard named[10350]: zone eldar.org/IN: Transfer started.
Aug 16 21:10:39 isengard named[10350]: 0x752b5010: transfer of 'eldar.org/IN' from 24.106.248.90#53: connected using 24.106.248.90#53
Aug 16 21:10:39 isengard named[10350]: /usr/src/external/mpl/bind/lib/libdns/../../dist/lib/dns/zone.c:18055: INSIST(((({ { int _ret = __libc_mutex_lock(&(zone)->atomic_lock); if ((_ret) != 0) { { char strerr[128]; isc_string_strerror_r(_ret, strerr, sizeof(strerr)); isc_error_fatal("/usr/src/external/mpl/bind/lib/libdns/../../dist/lib/dns/zone.c", 18055, __func__, "%s()" ": %s (%d)","pthread_mutex_lock", strerr, _ret); }; }; }; uint64_t x = (zone)->flags; { int _ret = __libc_mutex_unlock(&(zone)->atomic_lock); if ((_ret) != 0) { { char strerr[128]; isc_string_strerror_r(_ret, strerr, sizeof(strerr)); isc_error_fatal("/usr/src/external/mpl/bind/lib/libdns/../../dist/lib/dns/zone.c", 18055, __func__, "%s()" ": %s (%d)","pthread_mutex_unlock", strerr, _ret); }; }; }; x; }) & (DNS_ZONEFLG_REFRESH)) != 0)) failed
Aug 16 21:10:39 isengard named[10350]: 0x75c99c68 <isc_backtrace_log+0x28> at /usr/lib/libisc.so.23
Aug 16 21:10:39 isengard named[10350]: 0x7469a4 <assertion_failed+0x72b098> at /usr/sbin/named
Aug 16 21:10:39 isengard named[10350]: 0x75ca3bc8 <isc_assertion_failed+0x10> at /usr/lib/libisc.so.23
Aug 16 21:10:39 isengard named[10350]: 0x75d5426c <uv_poll_init+0x75cea0bc> at /usr/lib/libdns.so.26
Aug 16 21:10:39 isengard named[10350]: 0x75d898a0 <dns_zone_import_skr+0x2b8> at /usr/lib/libdns.so.26
Aug 16 21:10:39 isengard named[10350]: 0x75d8d9e8 <dns_xfrin_shutdown+0x1890> at /usr/lib/libdns.so.26
Aug 16 21:10:39 isengard named[10350]: 0x75c6b22c <isc__xml_setdestroycheck+0x34> at /usr/lib/libisc.so.23
Aug 16 21:10:39 isengard named[10350]: 0x75ca8ed8 <uv__stream_destroy+0x75c4a0a8> at /usr/lib/libisc.so.23
Aug 16 21:10:39 isengard named[10350]: 0x75cb4348 <uv_poll_start+0x75c4a080> at /usr/lib/libisc.so.23
Aug 16 21:10:39 isengard named[10350]: 0x75ca9930 <uv__read_start+0x75c4a0d0> at /usr/lib/libisc.so.23
Aug 16 21:10:39 isengard named[10350]: 0x75cb1a38 <uv_fs_chmod+0x75c4a084> at /usr/lib/libisc.so.23
Aug 16 21:10:39 isengard named[10350]: 0x75c9a718 <cds_lfht_malloc+0x75c4a2ec> at /usr/lib/libisc.so.23
Aug 16 21:10:39 isengard named[10350]: 0x796be0 <main+0x72c408> at /usr/sbin/named
Aug 16 21:10:39 isengard named[10350]: 0x73cc88 <___start+0x72b130> at /usr/sbin/named
Aug 16 21:10:39 isengard named[10350]: exiting (due to assertion failure)

To test, the system has just one zone it is trying to transfer.
Details about the DNS set up can be provided upon request.

This MAY be a duplicate of bin/59982, except on a ARM system rather
than a m68k.

>Fix:

No idea...  I tried to simplfy the config and did find that bind will
start if you don't do any zone transfers, but that isn't useful to me.
I am building the pkgsrc version of bind and will see if that works as
expected.  This wasn't broke in NetBSD 10.x