I give up. I’ll just stop and start the firewall.
Thanks for your time.
Unfortunately not something I can replicate here. I assume that you’re not using SMB1 (NT1) at all?
BTW, is connection tracking enabled in your firewalld config? Check that helpers are enabed if required via ‘firewall-config’ GUI (if installed) via the menu: View > Helpers
Also, you can check using
sudo firewall-cmd --permanent --get-helpers