When this occurs can you run ip a and ip -6 r on the host and in the container, I’d like to see if the default route has gone.
Sounds like it could be similar to Ipv6 route gets invalidated but not renewed and both are running ufw (not sure if related though).
I’d like to confirm you’re losing the default route inside the container.