Comment # 1 on bug 1226105 from James Fehlig

I'm unable to reproduce using 20240607. VM is connected to the 'default' NAT
network, obtains an IP address, and can reach external hosts. Nor do I see any
of the journal messages you mention.

To rule out apparmor, can you stop it, unload all profiles, and see if your VM
can then reach the external net? E.g.

systemctl stop apparmor.service
aa-teardown

Can you also provide the configuration of your libvirt NATed network? E.g.

virsh net-dumpxml <network-name>