The zone_postload() function can fail and unregister the callbacks. Call dns_db_endload() only after calling zone_postload() to make sure that the registered update-notify callbacks are not called when the zone loading has failed during zone_postload(). Also, don't ignore the return value of zone_postload().