Comment # 61 on bug 1080485 from - -

(In reply to Martin Wilck from comment #55)
> I haven't yet figured out which service starts the bpfilter_umh process.
> Have you? I suspected firewalld, but I've seen bpfilter_umh running on
> systems with firewalld disabled.

After a little research I found that it can be anything that calls
`(set|get)sockopt`.
https://github.com/torvalds/linux/commit/97adaddaa6db7a8af81b9b11e30cbe3628cd6700

However, I agree with you that Ronnie's problem is different (probably
completely unrelated to bpfilter_umh IMO) and debugging at the shutdown
breakpoint would be helpful.

Ronnie, first steps are described in
https://bugzilla.opensuse.org/show_bug.cgi?id=1080485#c11

In my experience, I would also suggest:
- enabling the magic sysrq key (temporarily),
- setting
`[Manager]
ShutdownWatchdogSec=0`
  in /run/systemd/system.conf.d/99-shutdown-watchdog.conf
- not using the 'rd.debug' option,
- trying to run commands, even if typed chars are not displayed.