libvirt does not work well with nftables yet

    install the iptables compatibility package for nftables (iptables-nft)
    edit /etc/libvirt/network.conf & set the backend to iptables

firewall_backend = "iptables"

from the virsh console:

net-destroy default
net-start default