Bug#1096000: sshd fatal assert: Unexpected error 9 on netlink descriptor 3

Package: openssh-server
Version: 8.8p1

The child process handling a customer login to an embedded system crashed on a fatal assert. The following backtrace was recovered from logs:

#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#1  0x00007fe72da6a535 in __GI_abort () at abort.c:79
#2  0x00007fe72dac1648 in __libc_message (action=action@entry=(do_abort | do_backtrace), fmt=fmt@entry=0x7fe72dbcae9c "%s") at ../sysdeps/posix/libc_fatal.c:181
#3  0x00007fe72dac1672 in __GI___libc_fatal (message=0x7fffbe8f3f70 "Unexpected error 9 on netlink descriptor 3.\n") at ../sysdeps/posix/libc_fatal.c:191
#4  0x00007fe72db5f264 in __GI___netlink_assert_response (fd=fd@entry=3, result=<optimized out>) at ../sysdeps/unix/sysv/linux/netlink_assert_response.c:102
#5  0x00007fe72db5ea63 in make_request (pid=22108, fd=3) at ../sysdeps/unix/sysv/linux/check_pf.c:171
#6  __check_pf (seen_ipv4=seen_ipv4@entry=0x7fffbe8f5232, seen_ipv6=seen_ipv6@entry=0x7fffbe8f5233, in6ai=in6ai@entry=0x7fffbe8f5240, in6ailen=in6ailen@entry=0x7fffbe8f5248) at ../sysdeps/unix/sysv/linux/check_pf.c:329
#7  0x00007fe72db2c5a7 in __GI_getaddrinfo (name=<optimized out>, service=0x0, hints=0x7fffbe8f5710, pai=0x7fffbe8f5708) at ../sysdeps/posix/getaddrinfo.c:2212
#8  0x00007fe72da24f53 in ?? () from /lib/x86_64-linux-gnu/libaudit.so.1
#9  0x00007fe72da25a32 in audit_log_acct_message () from /lib/x86_64-linux-gnu/libaudit.so.1
#10 0x00007fe72df8f5d4 in ?? () from /lib/x86_64-linux-gnu/libpam.so.0
#11 0x00007fe72df8f816 in ?? () from /lib/x86_64-linux-gnu/libpam.so.0
#12 0x00007fe72df89b9b in ?? () from /lib/x86_64-linux-gnu/libpam.so.0
#13 0x0000556b3c0bc307 in ?? ()
#14 0x0000556b3c090cf3 in ?? ()
#15 0x00007fe72da6c09b in __libc_start_main (main=0x556b3c08d940, argc=4, argv=0x7fffbe8f84f8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffbe8f84e8) at ../csu/libc-start.c:308
#16 0x0000556b3c0918ba in ?? ()

The interesting thing is this has happened twice (perhaps more) and the bad fd was 3 both times. From the source I see that descriptor 3 is reserved for a special purpose:
#define REEXEC_DEVCRYPTO_RESERVED_FD    (STDERR_FILENO + 1)

The following are in use: OpenSSL 1.1.1n, libpam 1.3.1-5, pam_tacplus-1.3.8
Linux 4.19.282
libc 2.28-10+deb10u4

The Debian OS is running on a VM. I could provide server and hypervisor details if needed.

Regards,
David Eoll
Microsoft Corp.