I tried once again with Debian 10.3 and thus Linux 4.19.98. I am no longer seeing the issue. I did a test upgrade in a copy of the cloud VM and after that worked I upgraded the original production machine as well.
I believe this bug can be closed, thanks. > root@bastiodon ~ # dpkg -l |egrep 'nftables|zfs-|linux-image|apparmor' > ii libapparmor1:amd64 2.13.2-10 amd64 > changehat AppArmor library > ii libnftables0:amd64 0.9.0-2 amd64 > Netfilter nftables high level userspace API library > ii libnftnl11:amd64 1.1.2-2 amd64 > Netfilter nftables userspace API library > ii linux-image-4.19.0-8-amd64 4.19.98-1 amd64 > Linux 4.19 for 64-bit PCs (signed) > ii linux-image-4.9.0-12-amd64 4.9.210-1 amd64 > Linux 4.9 for 64-bit PCs > ii linux-image-amd64 4.19+105+deb10u3 amd64 > Linux for 64-bit PCs (meta-package) > ii nftables 0.9.0-2 amd64 > Program to control packet filtering rules by Netfilter project > ii zfs-dkms 0.7.12-2+deb10u1 all > OpenZFS filesystem kernel modules for Linux > ii zfs-initramfs 0.7.12-2+deb10u1 all > OpenZFS root filesystem capabilities for Linux - initramfs > ii zfs-zed 0.7.12-2+deb10u1 amd64 > OpenZFS Event Daemon Best regards Tim Düsterhus