Sounds likely to be a routing loop? I'm not sure whether NM sets up policy routing to avoid this like wg-quick(8) does. I would hope they do, but it might also be rather lazy and not. Worth looking into, I suppose. In the interim, wg-quick will probably do the right thing.