Thank you for the suggestion. Just removed blank connection-type value, but it did not help.The fast-track rule has set property connection-type="" ... this is not the same as the property not being set. I think you should unset this property.
Do you have another clean router with up to date OS to compare? Actually, it should be possible to flash clean router with older SW.Are they supposed to be there or is this Mikrotik ROS system VPNfilter compromised ?