rbtdb.c:6762: REQUIRE(((rbtnode->nsec == DNS_RBT_NSEC_NSEC3 && (rdataset->type == ((dns_rdatatype_t)dns_rdatatype_nsec3) ...

Summary

Bind crashes after being upgraded.

BIND version used

BIND 9.18.7 (Stable Release) <id:85a6eb1>
running on Linux x86_64 3.10.0-1160.76.1.el7.x86_64 #1 SMP Wed Aug 10 16:21:17 UTC 2022
built by make with  '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--disable-dependency-tracking' '--prefix=/opt/isc/isc-bind/root/usr' '--exec-prefix=/opt/isc/isc-bind/root/usr' '--bindir=/opt/isc/isc-bind/root/usr/bin' '--sbindir=/opt/isc/isc-bind/root/usr/sbin' '--sysconfdir=/etc/opt/isc/isc-bind' '--datadir=/opt/isc/isc-bind/root/usr/share' '--includedir=/opt/isc/isc-bind/root/usr/include' '--libdir=/opt/isc/isc-bind/root/usr/lib64' '--libexecdir=/opt/isc/isc-bind/root/usr/libexec' '--localstatedir=/var/opt/isc/isc-bind' '--sharedstatedir=/var/opt/isc/isc-bind/lib' '--mandir=/opt/isc/isc-bind/root/usr/share/man' '--infodir=/opt/isc/isc-bind/root/usr/share/info' '--disable-static' '--enable-dnstap' '--with-pic' '--with-gssapi' '--with-json-c' '--with-libxml2' '--without-lmdb' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'CFLAGS=-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic' 'LDFLAGS=-Wl,-z,relro  -L/opt/isc/isc-bind/root/usr/lib64' 'CPPFLAGS= -I/opt/isc/isc-bind/root/usr/include' 'LT_SYS_LIBRARY_PATH=/usr/lib64' 'PKG_CONFIG_PATH=:/opt/isc/isc-bind/root/usr/lib64/pkgconfig:/opt/isc/isc-bind/root/usr/share/pkgconfig' 'SPHINX_BUILD=/builddir/build/BUILD/bind-9.18.7/sphinx/bin/sphinx-build'
compiled by GCC 4.8.5 20150623 (Red Hat 4.8.5-44)
compiled with OpenSSL version: OpenSSL 1.0.2k-fips  26 Jan 2017
linked to OpenSSL version: OpenSSL 1.0.2k-fips  26 Jan 2017
compiled with libuv version: 1.41.0
linked to libuv version: 1.44.2
compiled with libnghttp2 version: 1.33.0
linked to libnghttp2 version: 1.33.0
compiled with libxml2 version: 2.9.1
linked to libxml2 version: 20901
compiled with json-c version: 0.11
linked to json-c version: 0.11
compiled with zlib version: 1.2.7
linked to zlib version: 1.2.7
compiled with protobuf-c version: 1.3.3
linked to protobuf-c version: 1.4.1
threads support is enabled

default paths:
  named configuration:  /etc/opt/isc/isc-bind/named.conf
  rndc configuration:   /etc/opt/isc/isc-bind/rndc.conf
  DNSSEC root key:      /etc/opt/isc/isc-bind/bind.keys
  nsupdate session key: /var/opt/isc/isc-bind/run/named/session.key
  named PID file:       /var/opt/isc/isc-bind/run/named/named.pid
  named lock file:      /var/opt/isc/isc-bind/run/named/named.lock

Steps to reproduce

After upgrading and adding an explicit inline-signing: yes; to zones with a dnssec-policy bind crashes immediately after startup.

What is the current bug behavior?

Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: all zones loaded
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: running
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: network unreachable resolving './DNSKEY/IN': 2001:500:12::d0d#53
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: network unreachable resolving './NS/IN': 2001:500:12::d0d#53
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: rbtdb.c:6762: REQUIRE(((rbtnode->nsec == DNS_RBT_NSEC_NSEC3 && (rdataset->type == ((dns_rdatatype_t)dns_rdatatype_nsec3) || rdataset->covers == ((dns_rdatatype_t)dns_rdatatype_nsec3))) || (rbtnode->nsec != DNS_RBT_NSEC_NSEC3 && rdataset->type != ((dns_rdatatype_t)dns_rdatatype_nsec3) && rdataset->covers != ((dns_rdatatype_t)dns_rdatatype_nsec3)))) failed, back trace
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: /opt/isc/isc-bind/root/usr/sbin/named() [0x42db32]
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: /opt/isc/isc-bind/root/usr/lib64/libisc-9.18.7.so(isc_assertion_failed+0xa) [0x7f4887cfa97a]
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: /opt/isc/isc-bind/root/usr/lib64/libdns-9.18.7.so(+0xd15b3) [0x7f48879845b3]
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: /opt/isc/isc-bind/root/usr/lib64/libdns-9.18.7.so(+0x1680b0) [0x7f4887a1b0b0]
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: /opt/isc/isc-bind/root/usr/lib64/libdns-9.18.7.so(+0x19210f) [0x7f4887a4510f]
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: /opt/isc/isc-bind/root/usr/lib64/libisc-9.18.7.so(isc_task_run+0x174) [0x7f4887d1a244]
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: /opt/isc/isc-bind/root/usr/lib64/libisc-9.18.7.so(+0x1f43d) [0x7f4887ce143d]
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: /opt/isc/isc-bind/root/usr/lib64/libisc-9.18.7.so(+0x26df8) [0x7f4887ce8df8]
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: /opt/isc/isc-bind/root/usr/lib64/libisc-9.18.7.so(+0x2763b) [0x7f4887ce963b]
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: /opt/isc/isc-bind/root/usr/lib64/libisc-9.18.7.so(+0x28003) [0x7f4887cea003]
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: /opt/isc/isc-bind/root/usr/lib64/libuv.so.1(+0xf503) [0x7f4886109503]
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: /opt/isc/isc-bind/root/usr/lib64/libuv.so.1(+0x228f3) [0x7f488611c8f3]
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: /opt/isc/isc-bind/root/usr/lib64/libuv.so.1(uv_run+0xbd) [0x7f4886109d3d]
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: /opt/isc/isc-bind/root/usr/lib64/libisc-9.18.7.so(+0x27928) [0x7f4887ce9928]
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: /opt/isc/isc-bind/root/usr/lib64/libisc-9.18.7.so(isc__trampoline_run+0x15) [0x7f4887d22925]
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: /lib64/libpthread.so.0(+0x7ea5) [0x7f488532fea5]
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: /lib64/libc.so.6(clone+0x6d) [0x7f4885058b0d]
Oct 09 20:38:19 dns2.ewr1.develooper.com named[15953]: exiting (due to assertion failure)

What is the expected correct behavior?

Not crashing. :-)

Relevant configuration files

I'm happy to share privately if it'll help.