After little more debugging I see tc flow change:
From Offloaded:$ tc filter show dev ens37f0npf0vf6 ingress
filter protocol ip pref 2 flower chain 0
filter protocol ip pref 2 flower chain 0 handle 0x1
dst_mac 00:1c:73:aa:bb:cc
src_mac fa:16:7e:2e:8c:f0
eth_type ipv4
ip_flags nofrag
skip_sw
in_hw in_hw_count 1
action order 1: vlan push id 111 protocol 802.1Q priority 0 pipe
index 4 ref 1 bind 1
no_percpu
used_hw_stats delayed
action order 2: mirred (Egress Redirect to device openstack) stolen
index 4 ref 1 bind 1
cookie 605b82e5b94ef3fa63c3e78349851a27
no_percpu
used_hw_stats delayed
To software path:
ubuntu@noted-lynx:~$ tc filter show dev ens37f0npf0vf6 ingress
filter protocol ip pref 2 flower chain 0
filter protocol ip pref 2 flower chain 0 handle 0x1
dst_mac 00:1c:73:aa:bb:cc
src_mac fa:16:7e:2e:8c:f0
eth_type ipv4
ip_flags nofrag
not_in_hw
action order 1: vlan push id 111 protocol 802.1Q priority 0 pipe
index 4 ref 1 bind 1
no_percpu
action order 2: skbedit ptype host pipe
index 11 ref 1 bind 1
action order 3: mirred (Ingress Mirror to device br-ex) pipe
index 13 ref 1 bind 1
cookie 5037716e444e83b81c4ef9844df2377d
no_percpu
action order 4: mirred (Egress Redirect to device openstack) stolen
index 15 ref 1 bind 1
cookie 5037716e444e83b81c4ef9844df2377d
no_percpu
Also it is not in offloaded flows:
# ovs-appctl dpctl/dump-flows type=offloaded | grep 00:1c:73:aa:bb:cc
# ovs-appctl dpctl/dump-flows | grep 00:1c:73:aa:bb:cc
recirc_id(0),in_port(4),eth(src=fa:16:7e:2e:8c:f0,dst=00:1c:73:aa:bb:cc),eth_type(0x0800),ipv4(frag=no), packets:7819823, bytes:27047973132, used:2.000s, actions:push_vlan(vid=111,pcp=0),1,2