Thank you for the report. Could you try with the patch aeea940ad on a azure VM? Should be also work for 5.2. If it fix the problem for you it could be backported.
Can you also check in the wireshark that the Azure DNS does not include something meaningful into the OPT record data?