Nordic Glucose crashed after entering wrong passkey

In this application, I tried to enter a wrong bonding passkey to test PM_EVT_CONN_SEC_FAILED case. But I found that the program went into this case and after executed "sd_ble_gap_disconnect", it jumped into "app_error_fault_handler" then caused a system reset. The example is the origin example without any changes. Why it happenes?

The SDK is the latest one, nRF5_SDK_14.0.0, and the chip is nRF52832, the hardware is the official Development Kit.