I set different subnet of ACA under the same VNet of the private link of the ACR. It worked now. ref: https://learn.microsoft.com/en-us/azure/container-apps/custom-virtual-networks?tabs=workload-profiles-env