An addendum to my last comment about following the suggestion in comment 17 What's "virbr0"? I don't recall that ever showing up. And what does it mean to "load br_netfilter"? I don't know that I have ever done that, though it might have happened in the background due to some other command.