windows 10 x64
libzmq-v142-mt-4_3_5

The following is the abnormal information captured during the crash, I don't know what the reason is, I hope the big guy can help solve it, the probability of crash is very low, and it is difficult to reproduce
Crash address is 00007FFF6F1BA864(assert(poll_group->group_size < POLL_GROUP__MAX_GROUP_SIZE);)

00007FFF6F1BA85C int 3
00007FFF6F1BA85D int 3
00007FFF6F1BA85E int 3
00007FFF6F1BA85F int 3
--- D:\work\zeromq-zmq\zeromq-4.3.5\external\wepoll\wepoll.c -------------------

void poll_group_release(poll_group_t* poll_group) {
00007FFF6F1BA860 sub rsp,28h
port_state_t* port_state = poll_group->port_state;
queue_t* poll_group_queue = port_get_poll_group_queue(port_state);

poll_group->group_size--;
00007FFF6F1BA864 dec qword ptr [rcx+20h]
assert(poll_group->group_size < POLL_GROUP__MAX_GROUP_SIZE);

queue_move_to_end(poll_group_queue, &poll_group->queue_node);
00007FFF6F1BA868 lea rdx,[rcx+8]
00007FFF6F1BA86C mov rcx,qword ptr [rcx]
00007FFF6F1BA86F call port_get_poll_group_queue (07FFF6F1BACA0h)
00007FFF6F1BA874 mov rcx,rax

/* Poll groups are currently only freed when the epoll port is closed. */
}
00007FFF6F1BA877 add rsp,28h
assert(poll_group->group_size < POLL_GROUP__MAX_GROUP_SIZE);