Started the annual fedora template upgrade self-abuse.
Started with sys-net and sys-firewall, which worked.
All i did was change to upgraded templates.
Now, sys-firewall gets “Destination host unreachable” trying even to ping sys-net.
sys-net has an 10.137.x.x address in Qubes manager, but inside itself, no such address is assigned to vif.
Changing back to old template, which worked before, doesn’t fix this.