You're right. Took mwpmaybe's suggestion for the time being and only will accept IPv4 from ssh for now till that's fixed.

Indeed. I add this to sshd_config (with a note to remove it when this fail2ban issue is resolved):

  AddressFamily inet