Confusing output from firewall-cmd

I think the following is a "bug" even if it is just minor.  This is on F32. [root@meimei ~]# firewall-cmd --get-active-zone libvirt   interfaces: virbr0 public   interfaces: wlp4s0 enp2s0 The following seems correct for enp2s0. [egreshko@meimei ~]$ firewall-cmd --get-zone-of-interface=enp2s0 public [root@meimei ~]# firewall-cmd --query-interface=enp2s0 yes But then for virbr0 [root@meimei ~]# firewall-cmd --get-zone-of-interface=virbr0 libvirt Seems fine, yet this is "no" [root@meimei ~]# firewall-cmd --query-interface=virbr0 no but [root@meimei ~]# firewall-cmd --zone=libvirt --query-interface=virbr0 yes To make matters more confusing to me. [root@meimei ~]# firewall-cmd --list-interfaces wlp4s0 enp2s0 Why isn't virbr0 listed when --get-active-zone shows that as an interface? -- The key to getting good answers is to ask good questions.