See https://firewalld.org/documentation/configuration/firewalld-conf.html#ipv6_rpfilter

When re6st is running with tunnels, the IPv6 packets can come in through
an interface and go out through another. This is expected.