Also I realized, that the insert_failed and drop counters of conntrack are increasing:

I forgot to mention, that deleting the vrf_zones table "fixes" the issue.

Hi! I think I am hitting a similar/the same bug with a very minimal configuration.