When attaching a network to containers, PBR table rules will be NAT'ed (both ipv4 and ipv6). The issue seems to be the Podman mark rules conflicting with PBR, see forum thread for more details. Removing the network from containers and only use allow-host-networks will remove the conflicting NAT rules after reboot.