My Mi Note 10 failed SafetyNet after installing 21.9.8. Before installing a fix suggested by @Poney70 , I toggled Magisk Hide off/on in settings of Magisk v.23. Surprisingly, this fixed the mismatch, and now the phone passes CTS profile match. SafetyNet is still OK after many reboots.