New upstream version 1.29.90 upstream/1.29.90

1 files changed, 0 insertions, 18778 deletions

diff --git a/src/devices/nm-device.c b/src/devices/nm-device.c
deleted file mode 100644
index 0be05f23..00000000
--- a/src/devices/nm-device.c
+++ /dev/null
@@ -1,18778 +0,0 @@
-/* SPDX-License-Identifier: GPL-2.0+ */
-/*
- * Copyright (C) 2005 - 2018 Red Hat, Inc.
- * Copyright (C) 2006 - 2008 Novell, Inc.
- */
-
-#include "nm-default.h"
-
-#include "nm-device.h"
-
-#include <netinet/in.h>
-#include <unistd.h>
-#include <sys/ioctl.h>
-#include <signal.h>
-#include <sys/types.h>
-#include <sys/wait.h>
-#include <arpa/inet.h>
-#include <fcntl.h>
-#include <linux/if_addr.h>
-#include <linux/if_arp.h>
-#include <linux/rtnetlink.h>
-
-#include "nm-std-aux/unaligned.h"
-#include "nm-glib-aux/nm-dedup-multi.h"
-#include "nm-glib-aux/nm-random-utils.h"
-#include "systemd/nm-sd-utils-shared.h"
-
-#include "nm-libnm-core-intern/nm-ethtool-utils.h"
-#include "nm-libnm-core-intern/nm-common-macros.h"
-#include "nm-device-private.h"
-#include "nm-l3cfg.h"
-#include "nm-l3-config-data.h"
-#include "NetworkManagerUtils.h"
-#include "nm-manager.h"
-#include "platform/nm-platform.h"
-#include "platform/nm-platform-utils.h"
-#include "platform/nmp-object.h"
-#include "platform/nmp-rules-manager.h"
-#include "ndisc/nm-ndisc.h"
-#include "ndisc/nm-lndp-ndisc.h"
-#include "dhcp/nm-dhcp-manager.h"
-#include "dhcp/nm-dhcp-utils.h"
-#include "nm-act-request.h"
-#include "nm-proxy-config.h"
-#include "nm-ip4-config.h"
-#include "nm-ip6-config.h"
-#include "nm-pacrunner-manager.h"
-#include "dnsmasq/nm-dnsmasq-manager.h"
-#include "nm-dhcp-config.h"
-#include "nm-rfkill-manager.h"
-#include "nm-firewall-manager.h"
-#include "settings/nm-settings-connection.h"
-#include "settings/nm-settings.h"
-#include "nm-setting-ethtool.h"
-#include "nm-setting-user.h"
-#include "nm-auth-utils.h"
-#include "nm-keep-alive.h"
-#include "nm-netns.h"
-#include "nm-dispatcher.h"
-#include "nm-config.h"
-#include "c-list/src/c-list.h"
-#include "dns/nm-dns-manager.h"
-#include "nm-acd-manager.h"
-#include "nm-core-internal.h"
-#include "systemd/nm-sd.h"
-#include "nm-lldp-listener.h"
-#include "nm-audit-manager.h"
-#include "nm-connectivity.h"
-#include "nm-dbus-interface.h"
-
-#include "nm-device-generic.h"
-#include "nm-device-vlan.h"
-#include "nm-device-vrf.h"
-#include "nm-device-wireguard.h"
-
-#include "nm-device-logging.h"
-_LOG_DECLARE_SELF(NMDevice);
-
-/*****************************************************************************/
-
-#define DEFAULT_AUTOCONNECT TRUE
-
-static guint32
-dhcp_grace_period_from_timeout(guint32 timeout)
-{
-#define DHCP_GRACE_PERIOD_MULTIPLIER 2U
-
-    nm_assert(timeout > 0);
-    nm_assert(timeout < G_MAXINT32);
-
-    if (timeout < G_MAXUINT32 / DHCP_GRACE_PERIOD_MULTIPLIER)
-        return timeout * DHCP_GRACE_PERIOD_MULTIPLIER;
-
-    return G_MAXUINT32;
-}
-
-#define CARRIER_WAIT_TIME_MS           6000
-#define CARRIER_WAIT_TIME_AFTER_MTU_MS 10000
-
-#define NM_DEVICE_AUTH_RETRIES_UNSET    -1
-#define NM_DEVICE_AUTH_RETRIES_INFINITY -2
-#define NM_DEVICE_AUTH_RETRIES_DEFAULT  3
-
-/*****************************************************************************/
-
-typedef void (*ActivationHandleFunc)(NMDevice *self);
-
-typedef enum {
-    CLEANUP_TYPE_KEEP,
-    CLEANUP_TYPE_REMOVED,
-    CLEANUP_TYPE_DECONFIGURE,
-} CleanupType;
-
-typedef struct {
-    CList     lst_slave;
-    NMDevice *slave;
-    gulong    watch_id;
-    bool      slave_is_enslaved;
-    bool      configure;
-} SlaveInfo;
-
-typedef struct {
-    NMDevice *device;
-    guint     idle_add_id;
-    int       ifindex;
-} DeleteOnDeactivateData;
-
-typedef struct {
-    NMDevice *              device;
-    GCancellable *          cancellable;
-    NMPlatformAsyncCallback callback;
-    gpointer                callback_data;
-    guint                   num_vfs;
-    NMTernary               autoprobe;
-} SriovOp;
-
-typedef void (*AcdCallback)(NMDevice *, NMIP4Config **, gboolean);
-
-typedef enum {
-    /* The various NML3ConfigData types that we track explicitly. Note that
-     * their relative order matters: higher numbers in this enum means more
-     * important (and during merge overwrites other settings). */
-    L3_CONFIG_DATA_TYPE_LL_4,
-    L3_CONFIG_DATA_TYPE_AC_6,
-    L3_CONFIG_DATA_TYPE_DHCP_4,
-    L3_CONFIG_DATA_TYPE_DHCP_6,
-    L3_CONFIG_DATA_TYPE_DEV_4,
-    L3_CONFIG_DATA_TYPE_DEV_6,
-    L3_CONFIG_DATA_TYPE_SETTING,
-    _L3_CONFIG_DATA_TYPE_NUM,
-    _L3_CONFIG_DATA_TYPE_NONE,
-} L3ConfigDataType;
-
-typedef struct {
-    AcdCallback   callback;
-    NMDevice *    device;
-    NMIP4Config **configs;
-} AcdData;
-
-typedef enum {
-    HW_ADDR_TYPE_UNSET = 0,
-    HW_ADDR_TYPE_PERMANENT,
-    HW_ADDR_TYPE_EXPLICIT,
-    HW_ADDR_TYPE_GENERATED,
-} HwAddrType;
-
-typedef enum {
-    FIREWALL_STATE_UNMANAGED = 0,
-    FIREWALL_STATE_INITIALIZED,
-    FIREWALL_STATE_WAIT_STAGE_3,
-    FIREWALL_STATE_WAIT_IP_CONFIG,
-} FirewallState;
-
-typedef struct {
-    NMIPConfig *orig;    /* the original configuration applied to the device */
-    NMIPConfig *current; /* configuration after external changes.  NULL means
-                          * that the original configuration didn't change. */
-} AppliedConfig;
-
-typedef struct {
-    NMDhcpClient *client;
-    NMDhcpConfig *config;
-    gulong        state_sigid;
-    guint         grace_id;
-    bool          grace_pending : 1;
-    bool          was_active : 1;
-} DhcpData;
-
-struct _NMDeviceConnectivityHandle {
-    CList                        concheck_lst;
-    NMDevice *                   self;
-    NMDeviceConnectivityCallback callback;
-    gpointer                     user_data;
-    NMConnectivityCheckHandle *  c_handle;
-    guint64                      seq;
-    bool                         is_periodic : 1;
-    bool                         is_periodic_bump : 1;
-    bool                         is_periodic_bump_on_complete : 1;
-    int                          addr_family;
-};
-
-typedef struct {
-    int                     ifindex;
-    NMEthtoolFeatureStates *features;
-    NMTernary               requested[_NM_ETHTOOL_ID_FEATURE_NUM];
-    NMEthtoolCoalesceState *coalesce;
-    NMEthtoolRingState *    ring;
-} EthtoolState;
-
-/*****************************************************************************/
-
-enum {
-    STATE_CHANGED,
-    AUTOCONNECT_ALLOWED,
-    IP4_CONFIG_CHANGED,
-    IP6_CONFIG_CHANGED,
-    IP6_PREFIX_DELEGATED,
-    IP6_SUBNET_NEEDED,
-    REMOVED,
-    RECHECK_AUTO_ACTIVATE,
-    RECHECK_ASSUME,
-    LAST_SIGNAL,
-};
-static guint signals[LAST_SIGNAL] = {0};
-
-NM_GOBJECT_PROPERTIES_DEFINE(NMDevice,
-                             PROP_UDI,
-                             PROP_PATH,
-                             PROP_IFACE,
-                             PROP_IP_IFACE,
-                             PROP_DRIVER,
-                             PROP_DRIVER_VERSION,
-                             PROP_FIRMWARE_VERSION,
-                             PROP_CAPABILITIES,
-                             PROP_CARRIER,
-                             PROP_MTU,
-                             PROP_IP4_ADDRESS,
-                             PROP_IP4_CONFIG,
-                             PROP_DHCP4_CONFIG,
-                             PROP_IP6_CONFIG,
-                             PROP_DHCP6_CONFIG,
-                             PROP_STATE,
-                             PROP_STATE_REASON,
-                             PROP_ACTIVE_CONNECTION,
-                             PROP_DEVICE_TYPE,
-                             PROP_LINK_TYPE,
-                             PROP_MANAGED,
-                             PROP_AUTOCONNECT,
-                             PROP_FIRMWARE_MISSING,
-                             PROP_NM_PLUGIN_MISSING,
-                             PROP_TYPE_DESC,
-                             PROP_RFKILL_TYPE,
-                             PROP_IFINDEX,
-                             PROP_AVAILABLE_CONNECTIONS,
-                             PROP_PHYSICAL_PORT_ID,
-                             PROP_MASTER,
-                             PROP_PARENT,
-                             PROP_HW_ADDRESS,
-                             PROP_PERM_HW_ADDRESS,
-                             PROP_HAS_PENDING_ACTION,
-                             PROP_METERED,
-                             PROP_LLDP_NEIGHBORS,
-                             PROP_REAL,
-                             PROP_SLAVES,
-                             PROP_STATISTICS_REFRESH_RATE_MS,
-                             PROP_STATISTICS_TX_BYTES,
-                             PROP_STATISTICS_RX_BYTES,
-                             PROP_IP4_CONNECTIVITY,
-                             PROP_IP6_CONNECTIVITY,
-                             PROP_INTERFACE_FLAGS, );
-
-typedef struct _NMDevicePrivate {
-    bool in_state_changed;
-
-    guint device_link_changed_id;
-    guint device_ip_link_changed_id;
-
-    NMDeviceState       state;
-    NMDeviceStateReason state_reason;
-    struct {
-        guint id;
-
-        /* The @state/@reason is only valid, when @id is set. */
-        NMDeviceState       state;
-        NMDeviceStateReason reason;
-    } queued_state;
-
-    union {
-        struct {
-            guint queued_ip_config_id_6;
-            guint queued_ip_config_id_4;
-        };
-        guint queued_ip_config_id_x[2];
-    };
-
-    GSList *pending_actions;
-    GSList *dad6_failed_addrs;
-
-    NMDBusTrackObjPath parent_device;
-
-    char *udi;
-    char *path;
-
-    union {
-        const char *const iface;
-        char *            iface_;
-    };
-    union {
-        const char *const ip_iface;
-        char *            ip_iface_;
-    };
-
-    union {
-        const int ifindex;
-        int       ifindex_;
-    };
-    union {
-        const int ip_ifindex;
-        int       ip_ifindex_;
-    };
-
-    NMNetnsSharedIPHandle *shared_ip_handle;
-
-    int parent_ifindex;
-
-    int auth_retries;
-
-    union {
-        const guint8 hw_addr_len; /* read-only */
-        guint8       hw_addr_len_;
-    };
-
-    HwAddrType hw_addr_type : 5;
-
-    bool real : 1;
-
-    bool update_ip_config_completed_v4 : 1;
-    bool update_ip_config_completed_v6 : 1;
-
-    NMDeviceType         type;
-    char *               type_desc;
-    NMLinkType           link_type;
-    NMDeviceCapabilities capabilities;
-    char *               driver;
-    char *               driver_version;
-    char *               firmware_version;
-    RfKillType           rfkill_type;
-    bool                 firmware_missing : 1;
-    bool                 nm_plugin_missing : 1;
-    bool
-        hw_addr_perm_fake : 1; /* whether the permanent HW address could not be read and is a fake */
-
-    NMUtilsStableType current_stable_id_type : 3;
-
-    bool nm_owned : 1; /* whether the device is a device owned and created by NM */
-
-    bool  assume_state_guess_assume : 1;
-    char *assume_state_connection_uuid;
-
-    GHashTable *available_connections;
-    char *      hw_addr;
-    char *      hw_addr_perm;
-    char *      hw_addr_initial;
-    char *      physical_port_id;
-    guint       dev_id;
-
-    NMUnmanagedFlags unmanaged_mask;
-    NMUnmanagedFlags unmanaged_flags;
-    DeleteOnDeactivateData
-        *delete_on_deactivate_data; /* data for scheduled cleanup when deleting link (g_idle_add) */
-
-    GCancellable *deactivating_cancellable;
-
-    NMActRequest *     queued_act_request;
-    bool               queued_act_request_is_waiting_for_carrier : 1;
-    NMDBusTrackObjPath act_request;
-
-    union {
-        struct {
-            guint activation_source_id_6;
-            guint activation_source_id_4; /* for layer2 and IPv4. */
-        };
-        guint activation_source_id_x[2];
-    };
-
-    union {
-        struct {
-            ActivationHandleFunc activation_source_func_6;
-            ActivationHandleFunc activation_source_func_4; /* for layer2 and IPv4. */
-        };
-        ActivationHandleFunc activation_source_func_x[2];
-    };
-
-    guint recheck_assume_id;
-
-    struct {
-        guint               call_id;
-        NMDeviceStateReason available_reason;
-        NMDeviceStateReason unavailable_reason;
-    } recheck_available;
-
-    struct {
-        NMDispatcherCallId *call_id;
-        NMDeviceState       post_state;
-        NMDeviceStateReason post_state_reason;
-    } dispatcher;
-
-    /* Link stuff */
-    guint             link_connected_id;
-    guint             link_disconnected_id;
-    guint             carrier_defer_id;
-    guint             carrier_wait_id;
-    gulong            config_changed_id;
-    guint32           mtu;
-    guint32           ip6_mtu;
-    guint32           mtu_initial;
-    guint32           ip6_mtu_initial;
-    NMDeviceMtuSource mtu_source;
-
-    guint32 v4_route_table;
-    guint32 v6_route_table;
-
-    /* when carrier goes away, we give a grace period of _get_carrier_wait_ms()
-     * until taking action.
-     *
-     * When changing MTU, the device might take longer then that. So, whenever
-     * NM changes the MTU it sets @carrier_wait_until_ms to CARRIER_WAIT_TIME_AFTER_MTU_MS
-     * in the future. This is used to extend the grace period in this particular case. */
-    gint64 carrier_wait_until_ms;
-
-    union {
-        const NMDeviceSysIfaceState sys_iface_state;
-        NMDeviceSysIfaceState       sys_iface_state_;
-    };
-
-    bool carrier : 1;
-    bool ignore_carrier : 1;
-
-    bool up : 1; /* IFF_UP */
-
-    bool v4_commit_first_time : 1;
-    bool v6_commit_first_time : 1;
-
-    bool default_route_metric_penalty_ip4_has : 1;
-    bool default_route_metric_penalty_ip6_has : 1;
-
-    bool v4_route_table_initialized : 1;
-    bool v6_route_table_initialized : 1;
-
-    bool l3config_merge_flags_has : 1;
-
-    bool v4_route_table_all_sync_before : 1;
-    bool v6_route_table_all_sync_before : 1;
-
-    NMDeviceAutoconnectBlockedFlags autoconnect_blocked_flags : 5;
-
-    bool is_enslaved : 1;
-
-    bool ipv6ll_handle : 1; /* TRUE if NM handles the device's IPv6LL address */
-    bool ipv6ll_has : 1;
-    bool ndisc_started : 1;
-    bool device_link_changed_down : 1;
-
-    bool concheck_rp_filter_checked : 1;
-
-    NMDeviceStageState stage1_sriov_state : 3;
-
-    /* Generic DHCP stuff */
-    char *dhcp_anycast_address;
-
-    char *current_stable_id;
-
-    /* Proxy Configuration */
-    NMProxyConfig *    proxy_config;
-    NMPacrunnerConfId *pacrunner_conf_id;
-
-    /* IP configuration info. Combined config from VPN, settings, and device */
-    union {
-        struct {
-            NMIP6Config *ip_config_6;
-            NMIP4Config *ip_config_4;
-        };
-        NMIPConfig *ip_config_x[2];
-    };
-
-    /* Config from DHCP, PPP, LLv4, etc */
-    AppliedConfig dev_ip_config_4;
-
-    /* config from the setting */
-    union {
-        struct {
-            NMIP6Config *con_ip_config_6;
-            NMIP4Config *con_ip_config_4;
-        };
-        NMIPConfig *con_ip_config_x[2];
-    };
-
-    /* Stuff added outside NM */
-    union {
-        struct {
-            NMIP6Config *ext_ip_config_6;
-            NMIP4Config *ext_ip_config_4;
-        };
-        NMIPConfig *ext_ip_config_x[2];
-    };
-
-    /* VPNs which use this device */
-    union {
-        struct {
-            GSList *vpn_configs_6;
-            GSList *vpn_configs_4;
-        };
-        GSList *vpn_configs_x[2];
-    };
-
-    /* Extra device configuration, injected by the subclass of NMDevice.
-     * This is used for example by NMDeviceModem for WWAN configuration. */
-    union {
-        struct {
-            AppliedConfig dev2_ip_config_6;
-            AppliedConfig dev2_ip_config_4;
-        };
-        AppliedConfig dev2_ip_config_x[2];
-    };
-
-    /* DHCPv4 tracking */
-    struct {
-        char *pac_url;
-    } dhcp4;
-
-    struct {
-        /* IP6 config from DHCP */
-        AppliedConfig ip6_config;
-        /* Event ID of the current IP6 config from DHCP */
-        char *           event_id;
-        gulong           prefix_sigid;
-        NMNDiscDHCPLevel mode;
-        guint            needed_prefixes;
-    } dhcp6;
-
-    union {
-        struct {
-            DhcpData dhcp_data_6;
-            DhcpData dhcp_data_4;
-        };
-        DhcpData dhcp_data_x[2];
-    };
-
-    struct {
-        NMLogDomain log_domain;
-        guint       timeout;
-        guint       watch;
-        GPid        pid;
-        char *      binary;
-        char *      address;
-        guint       deadline;
-    } gw_ping;
-
-    /* dnsmasq stuff for shared connections */
-    NMDnsMasqManager *dnsmasq_manager;
-    gulong            dnsmasq_state_id;
-
-    /* Firewall */
-    FirewallState            fw_state : 4;
-    NMFirewallManager *      fw_mgr;
-    NMFirewallManagerCallId *fw_call;
-
-    /* IPv4LL stuff */
-    sd_ipv4ll *ipv4ll;
-    guint      ipv4ll_timeout;
-    guint      rt6_temporary_not_available_id;
-
-    /* IPv4 DAD stuff */
-    struct {
-        GSList *      dad_list;
-        NMAcdManager *announcing;
-    } acd;
-
-    union {
-        struct {
-            const NMDeviceIPState ip_state_6;
-            const NMDeviceIPState ip_state_4;
-        };
-        union {
-            const NMDeviceIPState ip_state_x[2];
-            NMDeviceIPState       ip_state_x_[2];
-        };
-    };
-
-    AppliedConfig   ac_ip6_config;           /* config from IPv6 autoconfiguration */
-    NMIP6Config *   ext_ip6_config_captured; /* Configuration captured from platform. */
-    NMIP6Config *   dad6_ip6_config;
-    struct in6_addr ipv6ll_addr;
-
-    GHashTable *rt6_temporary_not_available;
-
-    NMNDisc *                 ndisc;
-    gulong                    ndisc_changed_id;
-    gulong                    ndisc_timeout_id;
-    NMSettingIP6ConfigPrivacy ndisc_use_tempaddr;
-
-    guint  linklocal6_timeout_id;
-    guint8 linklocal6_dad_counter;
-
-    GHashTable *ip6_saved_properties;
-
-    EthtoolState *ethtool_state;
-
-    gboolean needs_ip6_subnet;
-
-    /* master interface for bridge/bond/team slave */
-    NMDevice *master;
-    gulong    master_ready_id;
-
-    /* slave management */
-    CList slaves; /* list of SlaveInfo */
-
-    NMMetered metered;
-
-    NMSettings *settings;
-    NMManager * manager;
-
-    NMNetns *netns;
-
-    NMLldpListener *lldp_listener;
-
-    NMConnectivity *concheck_mgr;
-    CList           concheck_lst_head;
-    struct {
-        /* if periodic checks are enabled, this is the source id for the next check. */
-        guint p_cur_id;
-
-        /* the currently configured max periodic interval. */
-        guint p_max_interval;
-
-        /* the current interval. If we are probing, the interval might be lower
-         * then the configured max interval. */
-        guint p_cur_interval;
-
-        /* the timestamp, when we last scheduled the timer p_cur_id with current interval
-         * p_cur_interval. */
-        gint64 p_cur_basetime_ns;
-
-        NMConnectivityState state;
-    } concheck_x[2];
-
-    guint   check_delete_unrealized_id;
-    guint32 interface_flags;
-
-    struct {
-        SriovOp *pending; /* SR-IOV operation currently running */
-        SriovOp *next;    /* next SR-IOV operation scheduled */
-    } sriov;
-    guint sriov_reset_pending;
-
-    struct {
-        guint   timeout_id;
-        guint   refresh_rate_ms;
-        guint64 tx_bytes;
-        guint64 rx_bytes;
-    } stats;
-
-    bool mtu_force_set_done : 1;
-} NMDevicePrivate;
-
-G_DEFINE_ABSTRACT_TYPE(NMDevice, nm_device, NM_TYPE_DBUS_OBJECT)
-
-#define NM_DEVICE_GET_PRIVATE(self) _NM_GET_PRIVATE_PTR(self, NMDevice, NM_IS_DEVICE)
-
-/*****************************************************************************/
-
-static const NMDBusInterfaceInfoExtended interface_info_device;
-static const GDBusSignalInfo             signal_info_state_changed;
-
-static void nm_device_set_proxy_config(NMDevice *self, const char *pac_url);
-
-static gboolean update_ext_ip_config(NMDevice *self, int addr_family, gboolean intersect_configs);
-
-static gboolean nm_device_set_ip_config(NMDevice *  self,
-                                        int         addr_family,
-                                        NMIPConfig *config,
-                                        gboolean    commit,
-                                        GPtrArray * ip4_dev_route_blacklist);
-
-static gboolean ip_config_merge_and_apply(NMDevice *self, int addr_family, gboolean commit);
-
-static gboolean nm_device_master_add_slave(NMDevice *self, NMDevice *slave, gboolean configure);
-static void     nm_device_slave_notify_enslave(NMDevice *self, gboolean success);
-static void     nm_device_slave_notify_release(NMDevice *self, NMDeviceStateReason reason);
-
-static void     addrconf6_start_with_link_ready(NMDevice *self);
-static gboolean linklocal6_start(NMDevice *self);
-
-static guint32 default_route_metric_penalty_get(NMDevice *self, int addr_family);
-
-static guint _prop_get_ipv4_dad_timeout(NMDevice *self);
-
-static void   _carrier_wait_check_queued_act_request(NMDevice *self);
-static gint64 _get_carrier_wait_ms(NMDevice *self);
-
-static const char *_activation_func_to_string(ActivationHandleFunc func);
-
-static void
-_set_state_full(NMDevice *self, NMDeviceState state, NMDeviceStateReason reason, gboolean quitting);
-static void             queued_state_clear(NMDevice *device);
-static gboolean         queued_ip4_config_change(gpointer user_data);
-static gboolean         queued_ip6_config_change(gpointer user_data);
-static void             ip_check_ping_watch_cb(GPid pid, int status, gpointer user_data);
-static gboolean         ip_config_valid(NMDeviceState state);
-static NMActStageReturn dhcp4_start(NMDevice *self);
-static gboolean         dhcp6_start(NMDevice *self, gboolean wait_for_ll);
-static void             nm_device_start_ip_check(NMDevice *self);
-static void             realize_start_setup(NMDevice *            self,
-                                            const NMPlatformLink *plink,
-                                            gboolean              assume_state_guess_assume,
-                                            const char *          assume_state_connection_uuid,
-                                            gboolean              set_nm_owned,
-                                            NMUnmanFlagOp         unmanaged_user_explicit,
-                                            gboolean              force_platform_init);
-static void             _set_mtu(NMDevice *self, guint32 mtu);
-static void             _commit_mtu(NMDevice *self, const NMIP4Config *config);
-static void             _cancel_activation(NMDevice *self);
-
-static void concheck_update_state(NMDevice *          self,
-                                  int                 addr_family,
-                                  NMConnectivityState state,
-                                  gboolean            is_periodic);
-
-static void activate_stage4_ip_config_timeout_4(NMDevice *self);
-static void activate_stage4_ip_config_timeout_6(NMDevice *self);
-
-static void (*const activate_stage4_ip_config_timeout_x[2])(NMDevice *self) = {
-    activate_stage4_ip_config_timeout_6,
-    activate_stage4_ip_config_timeout_4,
-};
-
-static void sriov_op_cb(GError *error, gpointer user_data);
-
-static void activate_stage5_ip_config_result_4(NMDevice *self);
-static void activate_stage5_ip_config_result_6(NMDevice *self);
-
-static void (*const activate_stage5_ip_config_result_x[2])(NMDevice *self) = {
-    activate_stage5_ip_config_result_6,
-    activate_stage5_ip_config_result_4,
-};
-
-/*****************************************************************************/
-
-static NM_UTILS_LOOKUP_STR_DEFINE(
-    queued_state_to_string,
-    NMDeviceState,
-    NM_UTILS_LOOKUP_DEFAULT(NM_PENDING_ACTIONPREFIX_QUEUED_STATE_CHANGE "???"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_UNKNOWN,
-                             NM_PENDING_ACTIONPREFIX_QUEUED_STATE_CHANGE "unknown"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_UNMANAGED,
-                             NM_PENDING_ACTIONPREFIX_QUEUED_STATE_CHANGE "unmanaged"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_UNAVAILABLE,
-                             NM_PENDING_ACTIONPREFIX_QUEUED_STATE_CHANGE "unavailable"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_DISCONNECTED,
-                             NM_PENDING_ACTIONPREFIX_QUEUED_STATE_CHANGE "disconnected"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_PREPARE,
-                             NM_PENDING_ACTIONPREFIX_QUEUED_STATE_CHANGE "prepare"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_CONFIG,
-                             NM_PENDING_ACTIONPREFIX_QUEUED_STATE_CHANGE "config"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_NEED_AUTH,
-                             NM_PENDING_ACTIONPREFIX_QUEUED_STATE_CHANGE "need-auth"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_IP_CONFIG,
-                             NM_PENDING_ACTIONPREFIX_QUEUED_STATE_CHANGE "ip-config"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_IP_CHECK,
-                             NM_PENDING_ACTIONPREFIX_QUEUED_STATE_CHANGE "ip-check"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_SECONDARIES,
-                             NM_PENDING_ACTIONPREFIX_QUEUED_STATE_CHANGE "secondaries"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_ACTIVATED,
-                             NM_PENDING_ACTIONPREFIX_QUEUED_STATE_CHANGE "activated"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_DEACTIVATING,
-                             NM_PENDING_ACTIONPREFIX_QUEUED_STATE_CHANGE "deactivating"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_FAILED,
-                             NM_PENDING_ACTIONPREFIX_QUEUED_STATE_CHANGE "failed"), );
-
-const char *
-nm_device_state_to_str(NMDeviceState state)
-{
-    return queued_state_to_string(state) + NM_STRLEN(NM_PENDING_ACTIONPREFIX_QUEUED_STATE_CHANGE);
-}
-
-NM_UTILS_LOOKUP_STR_DEFINE(
-    nm_device_state_reason_to_str,
-    NMDeviceStateReason,
-    NM_UTILS_LOOKUP_DEFAULT(NULL),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_UNKNOWN, "unknown"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_NONE, "none"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_NOW_MANAGED, "managed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_NOW_UNMANAGED, "unmanaged"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_CONFIG_FAILED, "config-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_IP_CONFIG_UNAVAILABLE, "ip-config-unavailable"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_IP_CONFIG_EXPIRED, "ip-config-expired"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_NO_SECRETS, "no-secrets"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_SUPPLICANT_DISCONNECT, "supplicant-disconnect"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_SUPPLICANT_CONFIG_FAILED,
-                             "supplicant-config-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_SUPPLICANT_FAILED, "supplicant-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_SUPPLICANT_TIMEOUT, "supplicant-timeout"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_PPP_START_FAILED, "ppp-start-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_PPP_DISCONNECT, "ppp-disconnect"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_PPP_FAILED, "ppp-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_DHCP_START_FAILED, "dhcp-start-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_DHCP_ERROR, "dhcp-error"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_DHCP_FAILED, "dhcp-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_SHARED_START_FAILED, "sharing-start-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_SHARED_FAILED, "sharing-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_AUTOIP_START_FAILED, "autoip-start-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_AUTOIP_ERROR, "autoip-error"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_AUTOIP_FAILED, "autoip-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_MODEM_BUSY, "modem-busy"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_MODEM_NO_DIAL_TONE, "modem-no-dialtone"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_MODEM_NO_CARRIER, "modem-no-carrier"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_MODEM_DIAL_TIMEOUT, "modem-dial-timeout"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_MODEM_DIAL_FAILED, "modem-dial-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_MODEM_INIT_FAILED, "modem-init-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_GSM_APN_FAILED, "gsm-apn-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_GSM_REGISTRATION_NOT_SEARCHING,
-                             "gsm-registration-idle"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_GSM_REGISTRATION_DENIED,
-                             "gsm-registration-denied"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_GSM_REGISTRATION_TIMEOUT,
-                             "gsm-registration-timeout"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_GSM_REGISTRATION_FAILED,
-                             "gsm-registration-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_GSM_PIN_CHECK_FAILED, "gsm-pin-check-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_FIRMWARE_MISSING, "firmware-missing"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_REMOVED, "removed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_SLEEPING, "sleeping"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_CONNECTION_REMOVED, "connection-removed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_USER_REQUESTED, "user-requested"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_CARRIER, "carrier-changed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_CONNECTION_ASSUMED, "connection-assumed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_SUPPLICANT_AVAILABLE, "supplicant-available"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_MODEM_NOT_FOUND, "modem-not-found"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_BT_FAILED, "bluetooth-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_GSM_SIM_NOT_INSERTED, "gsm-sim-not-inserted"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_GSM_SIM_PIN_REQUIRED, "gsm-sim-pin-required"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_GSM_SIM_PUK_REQUIRED, "gsm-sim-puk-required"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_GSM_SIM_WRONG, "gsm-sim-wrong"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_INFINIBAND_MODE, "infiniband-mode"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_DEPENDENCY_FAILED, "dependency-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_BR2684_FAILED, "br2684-bridge-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_MODEM_MANAGER_UNAVAILABLE,
-                             "modem-manager-unavailable"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_SSID_NOT_FOUND, "ssid-not-found"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_SECONDARY_CONNECTION_FAILED,
-                             "secondary-connection-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_DCB_FCOE_FAILED, "dcb-fcoe-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_TEAMD_CONTROL_FAILED, "teamd-control-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_MODEM_FAILED, "modem-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_MODEM_AVAILABLE, "modem-available"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_SIM_PIN_INCORRECT, "sim-pin-incorrect"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_NEW_ACTIVATION, "new-activation"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_PARENT_CHANGED, "parent-changed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_PARENT_MANAGED_CHANGED,
-                             "parent-managed-changed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_OVSDB_FAILED, "ovsdb-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_IP_ADDRESS_DUPLICATE, "ip-address-duplicate"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_IP_METHOD_UNSUPPORTED, "ip-method-unsupported"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_SRIOV_CONFIGURATION_FAILED,
-                             "sriov-configuration-failed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_STATE_REASON_PEER_NOT_FOUND, "peer-not-found"), );
-
-#define reason_to_string_a(reason) NM_UTILS_LOOKUP_STR_A(nm_device_state_reason_to_str, reason)
-
-static NM_UTILS_LOOKUP_STR_DEFINE(mtu_source_to_str,
-                                  NMDeviceMtuSource,
-                                  NM_UTILS_LOOKUP_DEFAULT_NM_ASSERT("unknown"),
-                                  NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_MTU_SOURCE_NONE, "none"),
-                                  NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_MTU_SOURCE_PARENT, "parent"),
-                                  NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_MTU_SOURCE_IP_CONFIG,
-                                                           "ip-config"),
-                                  NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_MTU_SOURCE_CONNECTION,
-                                                           "connection"), );
-
-/*****************************************************************************/
-
-static NMSettingIP6ConfigPrivacy
-_ip6_privacy_clamp(NMSettingIP6ConfigPrivacy use_tempaddr)
-{
-    switch (use_tempaddr) {
-    case NM_SETTING_IP6_CONFIG_PRIVACY_DISABLED:
-    case NM_SETTING_IP6_CONFIG_PRIVACY_PREFER_TEMP_ADDR:
-    case NM_SETTING_IP6_CONFIG_PRIVACY_PREFER_PUBLIC_ADDR:
-        return use_tempaddr;
-    default:
-        return NM_SETTING_IP6_CONFIG_PRIVACY_UNKNOWN;
-    }
-}
-
-/*****************************************************************************/
-
-static const char *
-_prop_get_connection_stable_id(NMDevice *         self,
-                               NMConnection *     connection,
-                               NMUtilsStableType *out_stable_type)
-{
-    NMDevicePrivate *priv;
-
-    nm_assert(NM_IS_DEVICE(self));
-    nm_assert(NM_IS_CONNECTION(connection));
-    nm_assert(out_stable_type);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    /* we cache the generated stable ID for the time of an activation.
-     *
-     * The reason is, that we don't want the stable-id to change as long
-     * as the device is active.
-     *
-     * Especially with ${RANDOM} stable-id we want to generate *one* configuration
-     * for each activation. */
-    if (G_UNLIKELY(!priv->current_stable_id)) {
-        gs_free char *       default_id = NULL;
-        gs_free char *       generated  = NULL;
-        NMUtilsStableType    stable_type;
-        NMSettingConnection *s_con;
-        gboolean             hwaddr_is_fake;
-        const char *         hwaddr;
-        const char *         stable_id;
-        const char *         uuid;
-
-        s_con = nm_connection_get_setting_connection(connection);
-
-        stable_id = nm_setting_connection_get_stable_id(s_con);
-
-        if (!stable_id) {
-            default_id =
-                nm_config_data_get_connection_default(NM_CONFIG_GET_DATA,
-                                                      NM_CON_DEFAULT("connection.stable-id"),
-                                                      self);
-            stable_id = default_id;
-        }
-
-        uuid = nm_connection_get_uuid(connection);
-
-        /* the cloned-mac-address may be generated based on the stable-id.
-         * Thus, at this point, we can only use the permanent MAC address
-         * as seed. */
-        hwaddr = nm_device_get_permanent_hw_address_full(self, TRUE, &hwaddr_is_fake);
-
-        stable_type = nm_utils_stable_id_parse(stable_id,
-                                               nm_device_get_ip_iface(self),
-                                               !hwaddr_is_fake ? hwaddr : NULL,
-                                               nm_utils_boot_id_str(),
-                                               uuid,
-                                               &generated);
-
-        /* current_stable_id_type is a bitfield! */
-        priv->current_stable_id_type = stable_type;
-        nm_assert(stable_type <= (NMUtilsStableType) 0x3);
-        nm_assert(stable_type + (NMUtilsStableType) 1 > (NMUtilsStableType) 0);
-        nm_assert(priv->current_stable_id_type == stable_type);
-
-        if (stable_type == NM_UTILS_STABLE_TYPE_UUID)
-            priv->current_stable_id = g_strdup(uuid);
-        else if (stable_type == NM_UTILS_STABLE_TYPE_STABLE_ID)
-            priv->current_stable_id = g_strdup(stable_id);
-        else if (stable_type == NM_UTILS_STABLE_TYPE_GENERATED)
-            priv->current_stable_id =
-                nm_str_realloc(nm_utils_stable_id_generated_complete(generated));
-        else {
-            nm_assert(stable_type == NM_UTILS_STABLE_TYPE_RANDOM);
-            priv->current_stable_id = nm_str_realloc(nm_utils_stable_id_random());
-        }
-        _LOGT(LOGD_DEVICE,
-              "stable-id: type=%d, \"%s\""
-              "%s%s%s",
-              (int) priv->current_stable_id_type,
-              priv->current_stable_id,
-              NM_PRINT_FMT_QUOTED(stable_type == NM_UTILS_STABLE_TYPE_GENERATED,
-                                  " from \"",
-                                  generated,
-                                  "\"",
-                                  ""));
-    }
-
-    nm_assert(priv->current_stable_id);
-    *out_stable_type = priv->current_stable_id_type;
-    return priv->current_stable_id;
-}
-
-static GBytes *
-_prop_get_ipv6_dhcp_duid(NMDevice *    self,
-                         NMConnection *connection,
-                         GBytes *      hwaddr,
-                         gboolean *    out_enforce)
-{
-    NMSettingIPConfig *s_ip6;
-    const char *       duid;
-    gs_free char *     duid_default = NULL;
-    const char *       duid_error;
-    GBytes *           duid_out;
-    gboolean           duid_enforce = TRUE;
-    gs_free char *     logstr1      = NULL;
-    const guint8 *     hwaddr_bin;
-    gsize              hwaddr_len;
-    int                arp_type;
-
-    s_ip6 = nm_connection_get_setting_ip6_config(connection);
-    duid  = nm_setting_ip6_config_get_dhcp_duid(NM_SETTING_IP6_CONFIG(s_ip6));
-
-    if (!duid) {
-        duid_default = nm_config_data_get_connection_default(NM_CONFIG_GET_DATA,
-                                                             NM_CON_DEFAULT("ipv6.dhcp-duid"),
-                                                             self);
-        duid         = duid_default;
-        if (!duid)
-            duid = "lease";
-    }
-
-    if (nm_streq(duid, "lease")) {
-        duid_enforce = FALSE;
-        duid_out     = nm_utils_generate_duid_from_machine_id();
-        goto out_good;
-    }
-
-    if (!_nm_utils_dhcp_duid_valid(duid, &duid_out)) {
-        duid_error = "invalid duid";
-        goto out_fail;
-    }
-
-    if (duid_out)
-        goto out_good;
-
-    if (NM_IN_STRSET(duid, "ll", "llt")) {
-        if (!hwaddr) {
-            duid_error = "missing link-layer address";
-            goto out_fail;
-        }
-
-        hwaddr_bin = g_bytes_get_data(hwaddr, &hwaddr_len);
-        arp_type   = nm_utils_arp_type_detect_from_hwaddrlen(hwaddr_len);
-        if (arp_type < 0) {
-            duid_error = "unsupported link-layer address";
-            goto out_fail;
-        }
-
-        if (nm_streq(duid, "ll"))
-            duid_out = nm_utils_generate_duid_ll(arp_type, hwaddr_bin, hwaddr_len);
-        else {
-            duid_out = nm_utils_generate_duid_llt(arp_type,
-                                                  hwaddr_bin,
-                                                  hwaddr_len,
-                                                  nm_utils_host_id_get_timestamp_ns()
-                                                      / NM_UTILS_NSEC_PER_SEC);
-        }
-
-        goto out_good;
-    }
-
-    if (NM_IN_STRSET(duid, "stable-ll", "stable-llt", "stable-uuid")) {
-        /* preferably, we would salt the checksum differently for each @duid type. We missed
-         * to do that initially, so most types use the DEFAULT_SALT.
-         *
-         * Implementations that are added later, should use a distinct salt instead,
-         * like "stable-ll"/"stable-llt" with ARPHRD_INFINIBAND below. */
-        const guint32         DEFAULT_SALT   = 670531087u;
-        nm_auto_free_checksum GChecksum *sum = NULL;
-        NMUtilsStableType                stable_type;
-        const char *                     stable_id = NULL;
-        guint32                          salted_header;
-        const guint8 *                   host_id;
-        gsize                            host_id_len;
-        union {
-            guint8 sha256[NM_UTILS_CHECKSUM_LENGTH_SHA256];
-            guint8 hwaddr_eth[ETH_ALEN];
-            guint8 hwaddr_infiniband[INFINIBAND_ALEN];
-            NMUuid uuid;
-            struct _nm_packed {
-                guint8  hwaddr[ETH_ALEN];
-                guint32 timestamp;
-            } llt_eth;
-            struct _nm_packed {
-                guint8  hwaddr[INFINIBAND_ALEN];
-                guint32 timestamp;
-            } llt_infiniband;
-        } digest;
-
-        stable_id = _prop_get_connection_stable_id(self, connection, &stable_type);
-
-        if (NM_IN_STRSET(duid, "stable-ll", "stable-llt")) {
-            /* for stable LL/LLT DUIDs, we still need a hardware address to detect
-             * the arp-type. Alternatively, we would be able to detect it based on
-             * other means (e.g. NMDevice type), but instead require the hardware
-             * address to be present. This is at least consistent with the "ll"/"llt"
-             * modes above. */
-            if (!hwaddr) {
-                duid_error = "missing link-layer address";
-                goto out_fail;
-            }
-            if ((arp_type = nm_utils_arp_type_detect_from_hwaddrlen(g_bytes_get_size(hwaddr)))
-                < 0) {
-                duid_error = "unsupported link-layer address";
-                goto out_fail;
-            }
-
-            if (arp_type == ARPHRD_ETHER)
-                salted_header = DEFAULT_SALT;
-            else {
-                nm_assert(arp_type == ARPHRD_INFINIBAND);
-                salted_header = 0x42492CEFu + ((guint32) arp_type);
-            }
-        } else {
-            salted_header = DEFAULT_SALT;
-            arp_type      = -1;
-        }
-
-        salted_header = htonl(salted_header + ((guint32) stable_type));
-
-        nm_utils_host_id_get(&host_id, &host_id_len);
-
-        sum = g_checksum_new(G_CHECKSUM_SHA256);
-        g_checksum_update(sum, (const guchar *) &salted_header, sizeof(salted_header));
-        g_checksum_update(sum, (const guchar *) stable_id, -1);
-        g_checksum_update(sum, (const guchar *) host_id, host_id_len);
-        nm_utils_checksum_get_digest(sum, digest.sha256);
-
-        G_STATIC_ASSERT_EXPR(sizeof(digest) == sizeof(digest.sha256));
-
-        if (nm_streq(duid, "stable-ll")) {
-            switch (arp_type) {
-            case ARPHRD_ETHER:
-                duid_out = nm_utils_generate_duid_ll(arp_type,
-                                                     digest.hwaddr_eth,
-                                                     sizeof(digest.hwaddr_eth));
-                break;
-            case ARPHRD_INFINIBAND:
-                duid_out = nm_utils_generate_duid_ll(arp_type,
-                                                     digest.hwaddr_infiniband,
-                                                     sizeof(digest.hwaddr_infiniband));
-                break;
-            default:
-                g_return_val_if_reached(NULL);
-            }
-        } else if (nm_streq(duid, "stable-llt")) {
-            gint64  time;
-            guint32 timestamp;
-
-#define EPOCH_DATETIME_THREE_YEARS (356 * 24 * 3600 * 3)
-
-            /* We want a variable time between the host_id timestamp and three years
-             * before. Let's compute the time (in seconds) from 0 to 3 years; then we'll
-             * subtract it from the host_id timestamp.
-             */
-            time = nm_utils_host_id_get_timestamp_ns() / NM_UTILS_NSEC_PER_SEC;
-
-            /* don't use too old timestamps. They cannot be expressed in DUID-LLT and
-             * would all be truncated to zero. */
-            time = NM_MAX(time, NM_UTILS_EPOCH_DATETIME_200001010000 + EPOCH_DATETIME_THREE_YEARS);
-
-            switch (arp_type) {
-            case ARPHRD_ETHER:
-                timestamp = unaligned_read_be32(&digest.llt_eth.timestamp);
-                time -= timestamp % EPOCH_DATETIME_THREE_YEARS;
-                duid_out = nm_utils_generate_duid_llt(arp_type,
-                                                      digest.llt_eth.hwaddr,
-                                                      sizeof(digest.llt_eth.hwaddr),
-                                                      time);
-                break;
-            case ARPHRD_INFINIBAND:
-                timestamp = unaligned_read_be32(&digest.llt_infiniband.timestamp);
-                time -= timestamp % EPOCH_DATETIME_THREE_YEARS;
-                duid_out = nm_utils_generate_duid_llt(arp_type,
-                                                      digest.llt_infiniband.hwaddr,
-                                                      sizeof(digest.llt_infiniband.hwaddr),
-                                                      time);
-                break;
-            default:
-                g_return_val_if_reached(NULL);
-            }
-        } else {
-            nm_assert(nm_streq(duid, "stable-uuid"));
-            duid_out = nm_utils_generate_duid_uuid(&digest.uuid);
-        }
-
-        goto out_good;
-    }
-
-    g_return_val_if_reached(NULL);
-
-out_fail:
-    nm_assert(!duid_out && duid_error);
-    {
-        NMUuid uuid;
-
-        _LOGW(LOGD_IP6 | LOGD_DHCP6,
-              "ipv6.dhcp-duid: failure to generate %s DUID: %s. Fallback to random DUID-UUID.",
-              duid,
-              duid_error);
-
-        nm_utils_random_bytes(&uuid, sizeof(uuid));
-        duid_out = nm_utils_generate_duid_uuid(&uuid);
-    }
-
-out_good:
-    nm_assert(duid_out);
-    _LOGD(LOGD_IP6 | LOGD_DHCP6,
-          "ipv6.dhcp-duid: generate %s DUID '%s' (%s)",
-          duid,
-          (logstr1 = nm_dhcp_utils_duid_to_string(duid_out)),
-          duid_enforce ? "enforcing" : "prefer lease");
-
-    NM_SET_OUT(out_enforce, duid_enforce);
-    return duid_out;
-}
-
-static guint32
-_prop_get_ipv6_ra_timeout(NMDevice *self)
-{
-    NMConnection *connection;
-    gint32        timeout;
-
-    G_STATIC_ASSERT_EXPR(NM_RA_TIMEOUT_DEFAULT == 0);
-    G_STATIC_ASSERT_EXPR(NM_RA_TIMEOUT_INFINITY == G_MAXINT32);
-
-    connection = nm_device_get_applied_connection(self);
-
-    timeout = nm_setting_ip6_config_get_ra_timeout(
-        NM_SETTING_IP6_CONFIG(nm_connection_get_setting_ip6_config(connection)));
-    if (timeout > 0)
-        return timeout;
-    nm_assert(timeout == 0);
-
-    return nm_config_data_get_connection_default_int64(NM_CONFIG_GET_DATA,
-                                                       NM_CON_DEFAULT("ipv6.ra-timeout"),
-                                                       self,
-                                                       0,
-                                                       G_MAXINT32,
-                                                       0);
-}
-
-static NMSettingConnectionMdns
-_prop_get_connection_mdns(NMDevice *self)
-{
-    NMConnection *          connection;
-    NMSettingConnectionMdns mdns = NM_SETTING_CONNECTION_MDNS_DEFAULT;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), NM_SETTING_CONNECTION_MDNS_DEFAULT);
-
-    connection = nm_device_get_applied_connection(self);
-    if (connection)
-        mdns = nm_setting_connection_get_mdns(nm_connection_get_setting_connection(connection));
-    if (mdns != NM_SETTING_CONNECTION_MDNS_DEFAULT)
-        return mdns;
-
-    return nm_config_data_get_connection_default_int64(NM_CONFIG_GET_DATA,
-                                                       NM_CON_DEFAULT("connection.mdns"),
-                                                       self,
-                                                       NM_SETTING_CONNECTION_MDNS_NO,
-                                                       NM_SETTING_CONNECTION_MDNS_YES,
-                                                       NM_SETTING_CONNECTION_MDNS_DEFAULT);
-}
-
-static NMSettingConnectionLlmnr
-_prop_get_connection_llmnr(NMDevice *self)
-{
-    NMConnection *           connection;
-    NMSettingConnectionLlmnr llmnr = NM_SETTING_CONNECTION_LLMNR_DEFAULT;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), NM_SETTING_CONNECTION_LLMNR_DEFAULT);
-
-    connection = nm_device_get_applied_connection(self);
-    if (connection)
-        llmnr = nm_setting_connection_get_llmnr(nm_connection_get_setting_connection(connection));
-    if (llmnr != NM_SETTING_CONNECTION_LLMNR_DEFAULT)
-        return llmnr;
-
-    return nm_config_data_get_connection_default_int64(NM_CONFIG_GET_DATA,
-                                                       NM_CON_DEFAULT("connection.llmnr"),
-                                                       self,
-                                                       NM_SETTING_CONNECTION_LLMNR_NO,
-                                                       NM_SETTING_CONNECTION_LLMNR_YES,
-                                                       NM_SETTING_CONNECTION_LLMNR_DEFAULT);
-}
-
-static guint32
-_prop_get_ipvx_route_table(NMDevice *self, int addr_family)
-{
-    NMDevicePrivate *    priv = NM_DEVICE_GET_PRIVATE(self);
-    NMDeviceClass *      klass;
-    NMConnection *       connection;
-    NMSettingIPConfig *  s_ip;
-    guint32              route_table    = 0;
-    gboolean             is_user_config = TRUE;
-    NMSettingConnection *s_con;
-    NMSettingVrf *       s_vrf;
-
-    nm_assert_addr_family(addr_family);
-
-    /* the route table setting affects how we sync routes. We shall
-     * not change it while the device is active, hence, cache it. */
-    if (addr_family == AF_INET) {
-        if (priv->v4_route_table_initialized)
-            return priv->v4_route_table;
-    } else {
-        if (priv->v6_route_table_initialized)
-            return priv->v6_route_table;
-    }
-
-    connection = nm_device_get_applied_connection(self);
-    if (connection) {
-        s_ip = nm_connection_get_setting_ip_config(connection, addr_family);
-        if (s_ip)
-            route_table = nm_setting_ip_config_get_route_table(s_ip);
-    }
-    if (route_table == 0u) {
-        gint64 v;
-
-        v = nm_config_data_get_connection_default_int64(NM_CONFIG_GET_DATA,
-                                                        addr_family == AF_INET
-                                                            ? NM_CON_DEFAULT("ipv4.route-table")
-                                                            : NM_CON_DEFAULT("ipv6.route-table"),
-                                                        self,
-                                                        0,
-                                                        G_MAXUINT32,
-                                                        -1);
-        if (v != -1) {
-            route_table    = v;
-            is_user_config = FALSE;
-        }
-    }
-
-    if (route_table == 0u && connection
-        && (s_con = nm_connection_get_setting_connection(connection))
-        && (nm_streq0(nm_setting_connection_get_slave_type(s_con), NM_SETTING_VRF_SETTING_NAME)
-            && priv->master && nm_device_get_device_type(priv->master) == NM_DEVICE_TYPE_VRF)) {
-        const NMPlatformLnkVrf *lnk;
-
-        lnk = nm_platform_link_get_lnk_vrf(nm_device_get_platform(self),
-                                           nm_device_get_ifindex(priv->master),
-                                           NULL);
-
-        if (lnk)
-            route_table = lnk->table;
-    }
-
-    if (route_table == 0u && connection
-        && (s_vrf = (NMSettingVrf *) nm_connection_get_setting(connection, NM_TYPE_SETTING_VRF))) {
-        route_table = nm_setting_vrf_get_table(s_vrf);
-    }
-
-    klass = NM_DEVICE_GET_CLASS(self);
-    if (klass->coerce_route_table)
-        route_table = klass->coerce_route_table(self, addr_family, route_table, is_user_config);
-
-    if (addr_family == AF_INET) {
-        priv->v4_route_table_initialized = TRUE;
-        priv->v4_route_table             = route_table;
-    } else {
-        priv->v6_route_table_initialized = TRUE;
-        priv->v6_route_table             = route_table;
-    }
-
-    _LOGT(LOGD_DEVICE,
-          "ipv%c.route-table = %u%s",
-          addr_family == AF_INET ? '4' : '6',
-          (guint)(route_table ?: RT_TABLE_MAIN),
-          route_table != 0u ? "" : " (policy routing not enabled)");
-
-    return route_table;
-}
-
-static gboolean
-_prop_get_connection_lldp(NMDevice *self)
-{
-    NMConnection *          connection;
-    NMSettingConnection *   s_con;
-    NMSettingConnectionLldp lldp = NM_SETTING_CONNECTION_LLDP_DEFAULT;
-
-    connection = nm_device_get_applied_connection(self);
-    g_return_val_if_fail(connection, FALSE);
-
-    s_con = nm_connection_get_setting_connection(connection);
-    g_return_val_if_fail(s_con, FALSE);
-
-    lldp = nm_setting_connection_get_lldp(s_con);
-    if (lldp == NM_SETTING_CONNECTION_LLDP_DEFAULT) {
-        lldp = nm_config_data_get_connection_default_int64(NM_CONFIG_GET_DATA,
-                                                           NM_CON_DEFAULT("connection.lldp"),
-                                                           self,
-                                                           NM_SETTING_CONNECTION_LLDP_DEFAULT,
-                                                           NM_SETTING_CONNECTION_LLDP_ENABLE_RX,
-                                                           NM_SETTING_CONNECTION_LLDP_DEFAULT);
-        if (lldp == NM_SETTING_CONNECTION_LLDP_DEFAULT)
-            lldp = NM_SETTING_CONNECTION_LLDP_DISABLE;
-    }
-    return lldp == NM_SETTING_CONNECTION_LLDP_ENABLE_RX;
-}
-
-static guint
-_prop_get_ipv4_dad_timeout(NMDevice *self)
-{
-    NMConnection *     connection;
-    NMSettingIPConfig *s_ip4   = NULL;
-    int                timeout = -1;
-
-    connection = nm_device_get_applied_connection(self);
-    if (connection)
-        s_ip4 = nm_connection_get_setting_ip4_config(connection);
-    if (s_ip4)
-        timeout = nm_setting_ip_config_get_dad_timeout(s_ip4);
-    if (timeout >= 0)
-        return timeout;
-
-    return nm_config_data_get_connection_default_int64(NM_CONFIG_GET_DATA,
-                                                       NM_CON_DEFAULT("ipv4.dad-timeout"),
-                                                       self,
-                                                       0,
-                                                       NM_SETTING_IP_CONFIG_DAD_TIMEOUT_MAX,
-                                                       0);
-}
-
-static guint32
-_prop_get_ipvx_dhcp_timeout(NMDevice *self, int addr_family)
-{
-    NMDeviceClass *klass;
-    NMConnection * connection;
-    int            timeout_i;
-    guint32        timeout;
-
-    nm_assert(NM_IS_DEVICE(self));
-    nm_assert_addr_family(addr_family);
-
-    connection = nm_device_get_applied_connection(self);
-
-    timeout_i = nm_setting_ip_config_get_dhcp_timeout(
-        nm_connection_get_setting_ip_config(connection, addr_family));
-    nm_assert(timeout_i >= 0 && timeout_i <= G_MAXINT32);
-
-    timeout = (guint32) timeout_i;
-    if (timeout)
-        goto out;
-
-    timeout = nm_config_data_get_connection_default_int64(NM_CONFIG_GET_DATA,
-                                                          addr_family == AF_INET
-                                                              ? NM_CON_DEFAULT("ipv4.dhcp-timeout")
-                                                              : NM_CON_DEFAULT("ipv6.dhcp-timeout"),
-                                                          self,
-                                                          0,
-                                                          G_MAXINT32,
-                                                          0);
-    if (timeout)
-        goto out;
-
-    klass = NM_DEVICE_GET_CLASS(self);
-    if (klass->get_dhcp_timeout_for_device) {
-        timeout = klass->get_dhcp_timeout_for_device(self, addr_family);
-        if (timeout)
-            goto out;
-    }
-
-    timeout = NM_DHCP_TIMEOUT_DEFAULT;
-
-out:
-    G_STATIC_ASSERT_EXPR(G_MAXINT32 == NM_DHCP_TIMEOUT_INFINITY);
-    nm_assert(timeout > 0);
-    nm_assert(timeout <= G_MAXINT32);
-    return timeout;
-}
-
-/**
- * _prop_get_ipvx_dhcp_iaid:
- * @self: the #NMDevice
- * @addr_family: the address family
- * @connection: the connection
- * @out_is_explicit: on return, %TRUE if the user set a valid IAID in
- *   the connection or in global configuration; %FALSE if the connection
- *   property was empty and no valid global configuration was provided.
- *
- * Returns: a IAID value for this device and the given connection.
- */
-static guint32
-_prop_get_ipvx_dhcp_iaid(NMDevice *    self,
-                         int           addr_family,
-                         NMConnection *connection,
-                         gboolean *    out_is_explicit)
-{
-    NMSettingIPConfig *s_ip;
-    const char *       iaid_str;
-    gs_free char *     iaid_str_free = NULL;
-    guint32            iaid;
-    const char *       iface;
-    const char *       fail_reason;
-    gboolean           is_explicit = TRUE;
-
-    s_ip     = nm_connection_get_setting_ip_config(connection, addr_family);
-    iaid_str = nm_setting_ip_config_get_dhcp_iaid(s_ip);
-    if (!iaid_str) {
-        iaid_str_free = nm_config_data_get_connection_default(
-            NM_CONFIG_GET_DATA,
-            addr_family == AF_INET ? NM_CON_DEFAULT("ipv4.dhcp-iaid")
-                                   : NM_CON_DEFAULT("ipv6.dhcp-iaid"),
-            self);
-        iaid_str = iaid_str_free;
-        if (!iaid_str) {
-            iaid_str    = NM_IAID_IFNAME;
-            is_explicit = FALSE;
-        } else if (!_nm_utils_iaid_verify(iaid_str, NULL)) {
-            _LOGW(LOGD_DEVICE,
-                  "invalid global default '%s' for ipv%c.dhcp-iaid",
-                  iaid_str,
-                  nm_utils_addr_family_to_char(addr_family));
-            iaid_str    = NM_IAID_IFNAME;
-            is_explicit = FALSE;
-        }
-    }
-
-    if (nm_streq0(iaid_str, NM_IAID_MAC)) {
-        const NMPlatformLink *pllink;
-
-        pllink = nm_platform_link_get(nm_device_get_platform(self), nm_device_get_ip_ifindex(self));
-        if (!pllink || pllink->l_address.len < 4) {
-            fail_reason = "invalid link-layer address";
-            goto out_fail;
-        }
-
-        /* @iaid is in native endianness. Use unaligned_read_be32()
-         * so that the IAID for a given MAC address is the same on
-         * BE and LE machines. */
-        iaid = unaligned_read_be32(&pllink->l_address.data[pllink->l_address.len - 4]);
-        goto out_good;
-    } else if (nm_streq0(iaid_str, NM_IAID_PERM_MAC)) {
-        guint8      hwaddr_buf[NM_UTILS_HWADDR_LEN_MAX];
-        const char *hwaddr_str;
-        gsize       hwaddr_len;
-
-        hwaddr_str = nm_device_get_permanent_hw_address(self);
-        if (!hwaddr_str) {
-            fail_reason = "no permanent link-layer address";
-            goto out_fail;
-        }
-
-        if (!_nm_utils_hwaddr_aton(hwaddr_str, hwaddr_buf, sizeof(hwaddr_buf), &hwaddr_len))
-            g_return_val_if_reached(0);
-
-        if (hwaddr_len < 4) {
-            fail_reason = "invalid link-layer address";
-            goto out_fail;
-        }
-
-        iaid = unaligned_read_be32(&hwaddr_buf[hwaddr_len - 4]);
-        goto out_good;
-    } else if (nm_streq(iaid_str, "stable")) {
-        nm_auto_free_checksum GChecksum *sum = NULL;
-        guint8                           digest[NM_UTILS_CHECKSUM_LENGTH_SHA1];
-        NMUtilsStableType                stable_type;
-        const char *                     stable_id;
-        guint32                          salted_header;
-        const guint8 *                   host_id;
-        gsize                            host_id_len;
-
-        stable_id     = _prop_get_connection_stable_id(self, connection, &stable_type);
-        salted_header = htonl(53390459 + stable_type);
-        nm_utils_host_id_get(&host_id, &host_id_len);
-        iface = nm_device_get_ip_iface(self);
-
-        sum = g_checksum_new(G_CHECKSUM_SHA1);
-        g_checksum_update(sum, (const guchar *) &salted_header, sizeof(salted_header));
-        g_checksum_update(sum, (const guchar *) stable_id, strlen(stable_id) + 1);
-        g_checksum_update(sum, (const guchar *) iface, strlen(iface) + 1);
-        g_checksum_update(sum, (const guchar *) host_id, host_id_len);
-        nm_utils_checksum_get_digest(sum, digest);
-
-        iaid = unaligned_read_be32(digest);
-        goto out_good;
-    } else if ((iaid = _nm_utils_ascii_str_to_int64(iaid_str, 10, 0, G_MAXUINT32, -1)) != -1) {
-        goto out_good;
-    } else {
-        iface = nm_device_get_ip_iface(self);
-        iaid  = nm_utils_create_dhcp_iaid(TRUE, (const guint8 *) iface, strlen(iface));
-        goto out_good;
-    }
-
-out_fail:
-    nm_assert(fail_reason);
-    _LOGW(addr_family == AF_INET ? (LOGD_DEVICE | LOGD_DHCP4 | LOGD_IP4)
-                                 : (LOGD_DEVICE | LOGD_DHCP6 | LOGD_IP6),
-          "ipv%c.dhcp-iaid: failure to generate IAID: %s. Using interface-name based IAID",
-          nm_utils_addr_family_to_char(addr_family),
-          fail_reason);
-    is_explicit = FALSE;
-    iface       = nm_device_get_ip_iface(self);
-    iaid        = nm_utils_create_dhcp_iaid(TRUE, (const guint8 *) iface, strlen(iface));
-out_good:
-    _LOGD(addr_family == AF_INET ? (LOGD_DEVICE | LOGD_DHCP4 | LOGD_IP4)
-                                 : (LOGD_DEVICE | LOGD_DHCP6 | LOGD_IP6),
-          "ipv%c.dhcp-iaid: using %u (0x%08x) IAID (str: '%s', explicit %d)",
-          nm_utils_addr_family_to_char(addr_family),
-          iaid,
-          iaid,
-          iaid_str,
-          is_explicit);
-    NM_SET_OUT(out_is_explicit, is_explicit);
-    return iaid;
-}
-
-static NMDhcpHostnameFlags
-_prop_get_ipvx_dhcp_hostname_flags(NMDevice *self, int addr_family)
-{
-    NMConnection *      connection;
-    NMSettingIPConfig * s_ip;
-    NMDhcpHostnameFlags flags;
-    gs_free_error GError *error = NULL;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), NM_DHCP_HOSTNAME_FLAG_NONE);
-
-    connection = nm_device_get_applied_connection(self);
-    s_ip       = nm_connection_get_setting_ip_config(connection, addr_family);
-    g_return_val_if_fail(s_ip, NM_DHCP_HOSTNAME_FLAG_NONE);
-
-    if (!nm_setting_ip_config_get_dhcp_send_hostname(s_ip))
-        return NM_DHCP_HOSTNAME_FLAG_NONE;
-
-    flags = nm_setting_ip_config_get_dhcp_hostname_flags(s_ip);
-    if (flags != NM_DHCP_HOSTNAME_FLAG_NONE)
-        return flags;
-
-    flags = nm_config_data_get_connection_default_int64(
-        NM_CONFIG_GET_DATA,
-        addr_family == AF_INET ? NM_CON_DEFAULT("ipv4.dhcp-hostname-flags")
-                               : NM_CON_DEFAULT("ipv6.dhcp-hostname-flags"),
-        self,
-        0,
-        NM_DHCP_HOSTNAME_FLAG_FQDN_CLEAR_FLAGS,
-        0);
-
-    if (!_nm_utils_validate_dhcp_hostname_flags(flags, addr_family, &error)) {
-        _LOGW(LOGD_DEVICE,
-              "invalid global default value 0x%x for ipv%d.%s: %s",
-              (guint) flags,
-              addr_family == AF_INET ? 4 : 6,
-              NM_SETTING_IP_CONFIG_DHCP_HOSTNAME_FLAGS,
-              error->message);
-        flags = NM_DHCP_HOSTNAME_FLAG_NONE;
-    }
-
-    if (flags != NM_DHCP_HOSTNAME_FLAG_NONE)
-        return flags;
-
-    if (addr_family == AF_INET)
-        return NM_DHCP_HOSTNAME_FLAGS_FQDN_DEFAULT_IP4;
-    else
-        return NM_DHCP_HOSTNAME_FLAGS_FQDN_DEFAULT_IP6;
-}
-
-static const char *
-_prop_get_connection_mud_url(NMDevice *self, NMSettingConnection *s_con, char **out_mud_url)
-{
-    const char *  mud_url;
-    gs_free char *s = NULL;
-
-    nm_assert(out_mud_url && !*out_mud_url);
-
-    mud_url = nm_setting_connection_get_mud_url(s_con);
-
-    if (mud_url) {
-        if (nm_streq(mud_url, NM_CONNECTION_MUD_URL_NONE))
-            return NULL;
-        return mud_url;
-    }
-
-    s = nm_config_data_get_connection_default(NM_CONFIG_GET_DATA,
-                                              NM_CON_DEFAULT("connection.mud-url"),
-                                              self);
-    if (s) {
-        if (nm_streq(s, NM_CONNECTION_MUD_URL_NONE))
-            return NULL;
-        if (nm_sd_http_url_is_valid_https(s))
-            return (*out_mud_url = g_steal_pointer(&s));
-    }
-
-    return NULL;
-}
-
-static GBytes *
-_prop_get_ipv4_dhcp_client_id(NMDevice *self, NMConnection *connection, GBytes *hwaddr)
-{
-    NMSettingIPConfig *s_ip4;
-    const char *       client_id;
-    gs_free char *     client_id_default = NULL;
-    guint8 *           client_id_buf;
-    const char *       fail_reason;
-    guint8             hwaddr_bin_buf[NM_UTILS_HWADDR_LEN_MAX];
-    const guint8 *     hwaddr_bin;
-    int                arp_type;
-    gsize              hwaddr_len;
-    GBytes *           result;
-    gs_free char *     logstr1 = NULL;
-
-    s_ip4     = nm_connection_get_setting_ip4_config(connection);
-    client_id = nm_setting_ip4_config_get_dhcp_client_id(NM_SETTING_IP4_CONFIG(s_ip4));
-
-    if (!client_id) {
-        client_id_default =
-            nm_config_data_get_connection_default(NM_CONFIG_GET_DATA,
-                                                  NM_CON_DEFAULT("ipv4.dhcp-client-id"),
-                                                  self);
-        if (client_id_default && client_id_default[0]) {
-            /* a non-empty client-id is always valid, see nm_dhcp_utils_client_id_string_to_bytes().  */
-            client_id = client_id_default;
-        }
-    }
-
-    if (!client_id) {
-        _LOGD(LOGD_DEVICE | LOGD_DHCP4 | LOGD_IP4,
-              "ipv4.dhcp-client-id: no explicit client-id configured");
-        return NULL;
-    }
-
-    if (nm_streq(client_id, "mac")) {
-        if (!hwaddr) {
-            fail_reason = "missing link-layer address";
-            goto out_fail;
-        }
-
-        hwaddr_bin = g_bytes_get_data(hwaddr, &hwaddr_len);
-        arp_type   = nm_utils_arp_type_detect_from_hwaddrlen(hwaddr_len);
-        if (arp_type < 0) {
-            fail_reason = "unsupported link-layer address";
-            goto out_fail;
-        }
-
-        result = nm_utils_dhcp_client_id_mac(arp_type, hwaddr_bin, hwaddr_len);
-        goto out_good;
-    }
-
-    if (nm_streq(client_id, "perm-mac")) {
-        const char *hwaddr_str;
-
-        hwaddr_str = nm_device_get_permanent_hw_address(self);
-        if (!hwaddr_str) {
-            fail_reason = "missing permanent link-layer address";
-            goto out_fail;
-        }
-
-        if (!_nm_utils_hwaddr_aton(hwaddr_str, hwaddr_bin_buf, sizeof(hwaddr_bin_buf), &hwaddr_len))
-            g_return_val_if_reached(NULL);
-
-        arp_type = nm_utils_arp_type_detect_from_hwaddrlen(hwaddr_len);
-        if (arp_type < 0) {
-            fail_reason = "unsupported permanent link-layer address";
-            goto out_fail;
-        }
-
-        result = nm_utils_dhcp_client_id_mac(arp_type, hwaddr_bin_buf, hwaddr_len);
-        goto out_good;
-    }
-
-    if (nm_streq(client_id, "duid")) {
-        guint32 iaid = _prop_get_ipvx_dhcp_iaid(self, AF_INET, connection, NULL);
-
-        result = nm_utils_dhcp_client_id_systemd_node_specific(iaid);
-        goto out_good;
-    }
-
-    if (nm_streq(client_id, "stable")) {
-        nm_auto_free_checksum GChecksum *sum = NULL;
-        guint8                           digest[NM_UTILS_CHECKSUM_LENGTH_SHA1];
-        NMUtilsStableType                stable_type;
-        const char *                     stable_id;
-        guint32                          salted_header;
-        const guint8 *                   host_id;
-        gsize                            host_id_len;
-
-        stable_id     = _prop_get_connection_stable_id(self, connection, &stable_type);
-        salted_header = htonl(2011610591 + stable_type);
-        nm_utils_host_id_get(&host_id, &host_id_len);
-
-        sum = g_checksum_new(G_CHECKSUM_SHA1);
-        g_checksum_update(sum, (const guchar *) &salted_header, sizeof(salted_header));
-        g_checksum_update(sum, (const guchar *) stable_id, strlen(stable_id) + 1);
-        g_checksum_update(sum, (const guchar *) host_id, host_id_len);
-        nm_utils_checksum_get_digest(sum, digest);
-
-        client_id_buf    = g_malloc(1 + 15);
-        client_id_buf[0] = 0;
-        memcpy(&client_id_buf[1], digest, 15);
-        result = g_bytes_new_take(client_id_buf, 1 + 15);
-        goto out_good;
-    }
-
-    result = nm_dhcp_utils_client_id_string_to_bytes(client_id);
-    goto out_good;
-
-out_fail:
-    nm_assert(fail_reason);
-    _LOGW(LOGD_DEVICE | LOGD_DHCP4 | LOGD_IP4,
-          "ipv4.dhcp-client-id: failure to generate client id (%s). Use random client id",
-          fail_reason);
-    client_id_buf    = g_malloc(1 + 15);
-    client_id_buf[0] = 0;
-    nm_utils_random_bytes(&client_id_buf[1], 15);
-    result = g_bytes_new_take(client_id_buf, 1 + 15);
-
-out_good:
-    nm_assert(result);
-    _LOGD(LOGD_DEVICE | LOGD_DHCP4 | LOGD_IP4,
-          "ipv4.dhcp-client-id: use \"%s\" client ID: %s",
-          client_id,
-          (logstr1 = nm_dhcp_utils_duid_to_string(result)));
-    return result;
-}
-
-static GBytes *
-_prop_get_ipv4_dhcp_vendor_class_identifier(NMDevice *self, NMSettingIP4Config *s_ip4)
-{
-    gs_free char *config_data_prop = NULL;
-    gs_free char *to_free          = NULL;
-    const char *  conn_prop;
-    GBytes *      bytes = NULL;
-    const char *  bin;
-    gsize         len;
-
-    conn_prop = nm_setting_ip4_config_get_dhcp_vendor_class_identifier(s_ip4);
-
-    if (!conn_prop) {
-        /* set in NetworkManager.conf ? */
-        config_data_prop = nm_config_data_get_connection_default(
-            NM_CONFIG_GET_DATA,
-            NM_CON_DEFAULT("ipv4.dhcp-vendor-class-identifier"),
-            self);
-
-        if (config_data_prop && nm_utils_validate_dhcp4_vendor_class_id(config_data_prop, NULL))
-            conn_prop = config_data_prop;
-    }
-
-    if (conn_prop) {
-        bin = nm_utils_buf_utf8safe_unescape(conn_prop,
-                                             NM_UTILS_STR_UTF8_SAFE_FLAG_NONE,
-                                             &len,
-                                             (gpointer *) &to_free);
-        if (to_free)
-            bytes = g_bytes_new_take(g_steal_pointer(&to_free), len);
-        else
-            bytes = g_bytes_new(bin, len);
-    }
-
-    return bytes;
-}
-
-static NMSettingIP6ConfigPrivacy
-_prop_get_ipv6_ip6_privacy(NMDevice *self)
-{
-    NMSettingIP6ConfigPrivacy ip6_privacy;
-    NMConnection *            connection;
-
-    g_return_val_if_fail(self, NM_SETTING_IP6_CONFIG_PRIVACY_UNKNOWN);
-
-    /* 1.) First look at the per-connection setting. If it is not -1 (unknown),
-     * use it. */
-    connection = nm_device_get_applied_connection(self);
-    if (connection) {
-        NMSettingIPConfig *s_ip6 = nm_connection_get_setting_ip6_config(connection);
-
-        if (s_ip6) {
-            ip6_privacy = nm_setting_ip6_config_get_ip6_privacy(NM_SETTING_IP6_CONFIG(s_ip6));
-            ip6_privacy = _ip6_privacy_clamp(ip6_privacy);
-            if (ip6_privacy != NM_SETTING_IP6_CONFIG_PRIVACY_UNKNOWN)
-                return ip6_privacy;
-        }
-    }
-
-    /* 2.) use the default value from the configuration. */
-    ip6_privacy =
-        nm_config_data_get_connection_default_int64(NM_CONFIG_GET_DATA,
-                                                    NM_CON_DEFAULT("ipv6.ip6-privacy"),
-                                                    self,
-                                                    NM_SETTING_IP6_CONFIG_PRIVACY_UNKNOWN,
-                                                    NM_SETTING_IP6_CONFIG_PRIVACY_PREFER_TEMP_ADDR,
-                                                    NM_SETTING_IP6_CONFIG_PRIVACY_UNKNOWN);
-    if (ip6_privacy != NM_SETTING_IP6_CONFIG_PRIVACY_UNKNOWN)
-        return ip6_privacy;
-
-    if (!nm_device_get_ip_ifindex(self))
-        return NM_SETTING_IP6_CONFIG_PRIVACY_UNKNOWN;
-
-    /* 3.) No valid default-value configured. Fallback to reading sysctl.
-     *
-     * Instead of reading static config files in /etc, just read the current sysctl value.
-     * This works as NM only writes to "/proc/sys/net/ipv6/conf/IFNAME/use_tempaddr", but leaves
-     * the "default" entry untouched. */
-    ip6_privacy = nm_platform_sysctl_get_int32(
-        nm_device_get_platform(self),
-        NMP_SYSCTL_PATHID_ABSOLUTE("/proc/sys/net/ipv6/conf/default/use_tempaddr"),
-        NM_SETTING_IP6_CONFIG_PRIVACY_UNKNOWN);
-    return _ip6_privacy_clamp(ip6_privacy);
-}
-
-static const char *
-_prop_get_x_cloned_mac_address(NMDevice *    self,
-                               NMConnection *connection,
-                               gboolean      is_wifi,
-                               char **       out_addr)
-{
-    NMSetting * setting;
-    const char *addr = NULL;
-
-    nm_assert(out_addr && !*out_addr);
-
-    setting = nm_connection_get_setting(connection,
-                                        is_wifi ? NM_TYPE_SETTING_WIRELESS : NM_TYPE_SETTING_WIRED);
-    if (setting) {
-        addr = is_wifi ? nm_setting_wireless_get_cloned_mac_address((NMSettingWireless *) setting)
-                       : nm_setting_wired_get_cloned_mac_address((NMSettingWired *) setting);
-    }
-
-    if (!addr) {
-        gs_free char *a = NULL;
-
-        a = nm_config_data_get_connection_default(
-            NM_CONFIG_GET_DATA,
-            is_wifi ? NM_CON_DEFAULT("wifi.cloned-mac-address")
-                    : NM_CON_DEFAULT("ethernet.cloned-mac-address"),
-            self);
-
-        addr = NM_CLONED_MAC_PRESERVE;
-
-        if (!a) {
-            if (is_wifi) {
-                NMSettingMacRandomization v;
-
-                /* for backward compatibility, read the deprecated wifi.mac-address-randomization setting. */
-                a = nm_config_data_get_connection_default(
-                    NM_CONFIG_GET_DATA,
-                    NM_CON_DEFAULT("wifi.mac-address-randomization"),
-                    self);
-                v = _nm_utils_ascii_str_to_int64(a,
-                                                 10,
-                                                 NM_SETTING_MAC_RANDOMIZATION_DEFAULT,
-                                                 NM_SETTING_MAC_RANDOMIZATION_ALWAYS,
-                                                 NM_SETTING_MAC_RANDOMIZATION_DEFAULT);
-                if (v == NM_SETTING_MAC_RANDOMIZATION_ALWAYS)
-                    addr = NM_CLONED_MAC_RANDOM;
-            }
-        } else if (NM_CLONED_MAC_IS_SPECIAL(a) || nm_utils_hwaddr_valid(a, ETH_ALEN))
-            addr = *out_addr = g_steal_pointer(&a);
-    }
-
-    return addr;
-}
-
-static const char *
-_prop_get_x_generate_mac_address_mask(NMDevice *    self,
-                                      NMConnection *connection,
-                                      gboolean      is_wifi,
-                                      char **       out_value)
-{
-    NMSetting * setting;
-    const char *value = NULL;
-    char *      a;
-
-    nm_assert(out_value && !*out_value);
-
-    setting = nm_connection_get_setting(connection,
-                                        is_wifi ? NM_TYPE_SETTING_WIRELESS : NM_TYPE_SETTING_WIRED);
-    if (setting) {
-        value =
-            is_wifi
-                ? nm_setting_wireless_get_generate_mac_address_mask((NMSettingWireless *) setting)
-                : nm_setting_wired_get_generate_mac_address_mask((NMSettingWired *) setting);
-        if (value)
-            return value;
-    }
-
-    a = nm_config_data_get_connection_default(
-        NM_CONFIG_GET_DATA,
-        is_wifi ? NM_CON_DEFAULT("wifi.generate-mac-address-mask")
-                : NM_CON_DEFAULT("ethernet.generate-mac-address-mask"),
-        self);
-    if (!a)
-        return NULL;
-    *out_value = a;
-    return a;
-}
-
-/*****************************************************************************/
-
-static void
-_ethtool_features_reset(NMDevice *self, NMPlatform *platform, EthtoolState *ethtool_state)
-{
-    gs_free NMEthtoolFeatureStates *features;
-
-    features = g_steal_pointer(&ethtool_state->features);
-
-    if (!nm_platform_ethtool_set_features(platform,
-                                          ethtool_state->ifindex,
-                                          features,
-                                          ethtool_state->requested,
-                                          FALSE))
-        _LOGW(LOGD_DEVICE, "ethtool: failure resetting one or more offload features");
-    else
-        _LOGD(LOGD_DEVICE, "ethtool: offload features successfully reset");
-}
-
-static void
-_ethtool_features_set(NMDevice *        self,
-                      NMPlatform *      platform,
-                      EthtoolState *    ethtool_state,
-                      NMSettingEthtool *s_ethtool)
-{
-    gs_free NMEthtoolFeatureStates *features = NULL;
-
-    if (ethtool_state->features)
-        _ethtool_features_reset(self, platform, ethtool_state);
-
-    if (nm_setting_ethtool_init_features(s_ethtool, ethtool_state->requested) == 0)
-        return;
-
-    features = nm_platform_ethtool_get_link_features(platform, ethtool_state->ifindex);
-    if (!features) {
-        _LOGW(LOGD_DEVICE, "ethtool: failure setting offload features (cannot read features)");
-        return;
-    }
-
-    if (!nm_platform_ethtool_set_features(platform,
-                                          ethtool_state->ifindex,
-                                          features,
-                                          ethtool_state->requested,
-                                          TRUE))
-        _LOGW(LOGD_DEVICE, "ethtool: failure setting one or more offload features");
-    else
-        _LOGD(LOGD_DEVICE, "ethtool: offload features successfully set");
-
-    ethtool_state->features = g_steal_pointer(&features);
-}
-
-static void
-_ethtool_coalesce_reset(NMDevice *self, NMPlatform *platform, EthtoolState *ethtool_state)
-{
-    gs_free NMEthtoolCoalesceState *coalesce = NULL;
-
-    nm_assert(NM_IS_DEVICE(self));
-    nm_assert(NM_IS_PLATFORM(platform));
-    nm_assert(ethtool_state);
-
-    coalesce = g_steal_pointer(&ethtool_state->coalesce);
-    if (!coalesce)
-        return;
-
-    if (!nm_platform_ethtool_set_coalesce(platform, ethtool_state->ifindex, coalesce))
-        _LOGW(LOGD_DEVICE, "ethtool: failure resetting one or more coalesce settings");
-    else
-        _LOGD(LOGD_DEVICE, "ethtool: coalesce settings successfully reset");
-}
-
-static void
-_ethtool_coalesce_set(NMDevice *        self,
-                      NMPlatform *      platform,
-                      EthtoolState *    ethtool_state,
-                      NMSettingEthtool *s_ethtool)
-{
-    NMEthtoolCoalesceState coalesce_old;
-    NMEthtoolCoalesceState coalesce_new;
-    gboolean               has_old = FALSE;
-    GHashTable *           hash;
-    GHashTableIter         iter;
-    const char *           name;
-    GVariant *             variant;
-
-    nm_assert(NM_IS_DEVICE(self));
-    nm_assert(NM_IS_PLATFORM(platform));
-    nm_assert(NM_IS_SETTING_ETHTOOL(s_ethtool));
-    nm_assert(ethtool_state);
-    nm_assert(!ethtool_state->coalesce);
-
-    hash = _nm_setting_option_hash(NM_SETTING(s_ethtool), FALSE);
-    if (!hash)
-        return;
-
-    g_hash_table_iter_init(&iter, hash);
-    while (g_hash_table_iter_next(&iter, (gpointer *) &name, (gpointer *) &variant)) {
-        NMEthtoolID ethtool_id = nm_ethtool_id_get_by_name(name);
-
-        if (!nm_ethtool_id_is_coalesce(ethtool_id))
-            continue;
-
-        if (!has_old) {
-            if (!nm_platform_ethtool_get_link_coalesce(platform,
-                                                       ethtool_state->ifindex,
-                                                       &coalesce_old)) {
-                _LOGW(LOGD_DEVICE, "ethtool: failure getting coalesce settings (cannot read)");
-                return;
-            }
-            has_old      = TRUE;
-            coalesce_new = coalesce_old;
-        }
-
-        nm_assert(g_variant_is_of_type(variant, G_VARIANT_TYPE_UINT32));
-        coalesce_new.s[_NM_ETHTOOL_ID_COALESCE_AS_IDX(ethtool_id)] = g_variant_get_uint32(variant);
-    }
-
-    if (!has_old)
-        return;
-
-    ethtool_state->coalesce = nm_memdup(&coalesce_old, sizeof(coalesce_old));
-
-    if (!nm_platform_ethtool_set_coalesce(platform, ethtool_state->ifindex, &coalesce_new)) {
-        _LOGW(LOGD_DEVICE, "ethtool: failure setting coalesce settings");
-        return;
-    }
-
-    _LOGD(LOGD_DEVICE, "ethtool: coalesce settings successfully set");
-}
-
-static void
-_ethtool_ring_reset(NMDevice *self, NMPlatform *platform, EthtoolState *ethtool_state)
-{
-    gs_free NMEthtoolRingState *ring = NULL;
-
-    nm_assert(NM_IS_DEVICE(self));
-    nm_assert(NM_IS_PLATFORM(platform));
-    nm_assert(ethtool_state);
-
-    ring = g_steal_pointer(&ethtool_state->ring);
-    if (!ring)
-        return;
-
-    if (!nm_platform_ethtool_set_ring(platform, ethtool_state->ifindex, ring))
-        _LOGW(LOGD_DEVICE, "ethtool: failure resetting one or more ring settings");
-    else
-        _LOGD(LOGD_DEVICE, "ethtool: ring settings successfully reset");
-}
-
-static void
-_ethtool_ring_set(NMDevice *        self,
-                  NMPlatform *      platform,
-                  EthtoolState *    ethtool_state,
-                  NMSettingEthtool *s_ethtool)
-{
-    NMEthtoolRingState ring_old;
-    NMEthtoolRingState ring_new;
-    GHashTable *       hash;
-    GHashTableIter     iter;
-    const char *       name;
-    GVariant *         variant;
-    gboolean           has_old = FALSE;
-
-    nm_assert(NM_IS_DEVICE(self));
-    nm_assert(NM_IS_PLATFORM(platform));
-    nm_assert(NM_IS_SETTING_ETHTOOL(s_ethtool));
-    nm_assert(ethtool_state);
-    nm_assert(!ethtool_state->ring);
-
-    hash = _nm_setting_option_hash(NM_SETTING(s_ethtool), FALSE);
-    if (!hash)
-        return;
-
-    g_hash_table_iter_init(&iter, hash);
-    while (g_hash_table_iter_next(&iter, (gpointer *) &name, (gpointer *) &variant)) {
-        NMEthtoolID ethtool_id = nm_ethtool_id_get_by_name(name);
-        guint32     u32;
-
-        if (!nm_ethtool_id_is_ring(ethtool_id))
-            continue;
-
-        nm_assert(g_variant_is_of_type(variant, G_VARIANT_TYPE_UINT32));
-
-        if (!has_old) {
-            if (!nm_platform_ethtool_get_link_ring(platform, ethtool_state->ifindex, &ring_old)) {
-                _LOGW(LOGD_DEVICE,
-                      "ethtool: failure setting ring options (cannot read existing setting)");
-                return;
-            }
-            has_old  = TRUE;
-            ring_new = ring_old;
-        }
-
-        u32 = g_variant_get_uint32(variant);
-
-        switch (ethtool_id) {
-        case NM_ETHTOOL_ID_RING_RX:
-            ring_new.rx_pending = u32;
-            break;
-        case NM_ETHTOOL_ID_RING_RX_JUMBO:
-            ring_new.rx_jumbo_pending = u32;
-            break;
-        case NM_ETHTOOL_ID_RING_RX_MINI:
-            ring_new.rx_mini_pending = u32;
-            break;
-        case NM_ETHTOOL_ID_RING_TX:
-            ring_new.tx_pending = u32;
-            break;
-        default:
-            nm_assert_not_reached();
-        }
-    }
-
-    if (!has_old)
-        return;
-
-    ethtool_state->ring = nm_memdup(&ring_old, sizeof(ring_old));
-
-    if (!nm_platform_ethtool_set_ring(platform, ethtool_state->ifindex, &ring_new)) {
-        _LOGW(LOGD_DEVICE, "ethtool: failure setting ring settings");
-        return;
-    }
-
-    _LOGD(LOGD_DEVICE, "ethtool: ring settings successfully set");
-}
-
-static void
-_ethtool_state_reset(NMDevice *self)
-{
-    NMPlatform *     platform           = nm_device_get_platform(self);
-    NMDevicePrivate *priv               = NM_DEVICE_GET_PRIVATE(self);
-    gs_free EthtoolState *ethtool_state = g_steal_pointer(&priv->ethtool_state);
-
-    if (!ethtool_state)
-        return;
-
-    if (ethtool_state->features)
-        _ethtool_features_reset(self, platform, ethtool_state);
-    if (ethtool_state->coalesce)
-        _ethtool_coalesce_reset(self, platform, ethtool_state);
-    if (ethtool_state->ring)
-        _ethtool_ring_reset(self, platform, ethtool_state);
-}
-
-static void
-_ethtool_state_set(NMDevice *self)
-{
-    int               ifindex;
-    NMPlatform *      platform;
-    NMConnection *    connection;
-    NMSettingEthtool *s_ethtool;
-    gs_free EthtoolState *ethtool_state = NULL;
-    NMDevicePrivate *     priv          = NM_DEVICE_GET_PRIVATE(self);
-
-    ifindex = nm_device_get_ip_ifindex(self);
-    if (ifindex <= 0)
-        return;
-
-    platform = nm_device_get_platform(self);
-    nm_assert(platform);
-
-    connection = nm_device_get_applied_connection(self);
-    if (!connection)
-        return;
-
-    s_ethtool = NM_SETTING_ETHTOOL(nm_connection_get_setting(connection, NM_TYPE_SETTING_ETHTOOL));
-    if (!s_ethtool)
-        return;
-
-    ethtool_state          = g_new0(EthtoolState, 1);
-    ethtool_state->ifindex = ifindex;
-
-    _ethtool_features_set(self, platform, ethtool_state, s_ethtool);
-    _ethtool_coalesce_set(self, platform, ethtool_state, s_ethtool);
-    _ethtool_ring_set(self, platform, ethtool_state, s_ethtool);
-
-    if (ethtool_state->features || ethtool_state->coalesce || ethtool_state->ring)
-        priv->ethtool_state = g_steal_pointer(&ethtool_state);
-}
-
-/*****************************************************************************/
-
-static gboolean
-is_loopback(NMDevice *self)
-{
-    return NM_IS_DEVICE_GENERIC(self) && NM_DEVICE_GET_PRIVATE(self)->ifindex == 1;
-}
-
-gboolean
-nm_device_is_vpn(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    /* NetworkManager currently treats VPN connections (loaded from NetworkManager VPN plugins)
-     * differently. Those are considered VPNs.
-     * However, some native device types may also be considered VPNs...
-     *
-     * We should avoid distinguishing between is-vpn and "regular" devices. Is an (unencrypted)
-     * IP tunnel a VPN? Is MACSec on top of an IP tunnel a VPN?
-     * Sometimes we differentiate, but avoid unless reasonable. */
-
-    return NM_IS_DEVICE_WIREGUARD(self);
-}
-
-NMSettings *
-nm_device_get_settings(NMDevice *self)
-{
-    return NM_DEVICE_GET_PRIVATE(self)->settings;
-}
-
-NMManager *
-nm_device_get_manager(NMDevice *self)
-{
-    return NM_DEVICE_GET_PRIVATE(self)->manager;
-}
-
-NMNetns *
-nm_device_get_netns(NMDevice *self)
-{
-    return NM_DEVICE_GET_PRIVATE(self)->netns;
-}
-
-NMDedupMultiIndex *
-nm_device_get_multi_index(NMDevice *self)
-{
-    return nm_netns_get_multi_idx(nm_device_get_netns(self));
-}
-
-NMPlatform *
-nm_device_get_platform(NMDevice *self)
-{
-    return nm_netns_get_platform(nm_device_get_netns(self));
-}
-
-static NMConnectivity *
-concheck_get_mgr(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (G_UNLIKELY(!priv->concheck_mgr))
-        priv->concheck_mgr = g_object_ref(nm_connectivity_get());
-    return priv->concheck_mgr;
-}
-
-NMIP4Config *
-nm_device_ip4_config_new(NMDevice *self)
-{
-    return nm_ip4_config_new(nm_device_get_multi_index(self), nm_device_get_ip_ifindex(self));
-}
-
-NMIP6Config *
-nm_device_ip6_config_new(NMDevice *self)
-{
-    return nm_ip6_config_new(nm_device_get_multi_index(self), nm_device_get_ip_ifindex(self));
-}
-
-NMIPConfig *
-nm_device_ip_config_new(NMDevice *self, int addr_family)
-{
-    nm_assert_addr_family(addr_family);
-
-    return addr_family == AF_INET ? (gpointer) nm_device_ip4_config_new(self)
-                                  : (gpointer) nm_device_ip6_config_new(self);
-}
-
-NML3ConfigData *
-nm_device_create_l3_config_data(NMDevice *self)
-{
-    int ifindex;
-
-    nm_assert(NM_IS_DEVICE(self));
-
-    ifindex = nm_device_get_ip_ifindex(self);
-    if (ifindex <= 0)
-        g_return_val_if_reached(NULL);
-
-    return nm_l3_config_data_new(nm_device_get_multi_index(self), ifindex);
-}
-
-static void
-applied_config_clear(AppliedConfig *config)
-{
-    g_clear_object(&config->current);
-    g_clear_object(&config->orig);
-}
-
-static void
-applied_config_init(AppliedConfig *config, gpointer ip_config)
-{
-    nm_assert(!ip_config || (!config->orig && !config->current)
-              || nm_ip_config_get_addr_family(ip_config)
-                     == nm_ip_config_get_addr_family(config->orig ?: config->current));
-    nm_assert(!ip_config || NM_IS_IP_CONFIG(ip_config));
-
-    nm_g_object_ref(ip_config);
-    applied_config_clear(config);
-    config->orig = ip_config;
-}
-
-static void
-applied_config_init_new(AppliedConfig *config, NMDevice *self, int addr_family)
-{
-    gs_unref_object NMIPConfig *c = nm_device_ip_config_new(self, addr_family);
-
-    applied_config_init(config, c);
-}
-
-static NMIPConfig *
-applied_config_get_current(AppliedConfig *config)
-{
-    return config->current ?: config->orig;
-}
-
-static void
-applied_config_add_address(AppliedConfig *config, const NMPlatformIPAddress *address)
-{
-    if (config->orig)
-        nm_ip_config_add_address(config->orig, address);
-    else
-        nm_assert(!config->current);
-
-    if (config->current)
-        nm_ip_config_add_address(config->current, address);
-}
-
-static void
-applied_config_add_nameserver(AppliedConfig *config, const NMIPAddr *ns)
-{
-    if (config->orig)
-        nm_ip_config_add_nameserver(config->orig, ns);
-    else
-        nm_assert(!config->current);
-
-    if (config->current)
-        nm_ip_config_add_nameserver(config->current, ns);
-}
-
-static void
-applied_config_add_search(AppliedConfig *config, const char *new)
-{
-    if (config->orig)
-        nm_ip_config_add_search(config->orig, new);
-    else
-        nm_assert(!config->current);
-
-    if (config->current)
-        nm_ip_config_add_search(config->current, new);
-}
-
-static void
-applied_config_reset_searches(AppliedConfig *config)
-{
-    if (config->orig)
-        nm_ip_config_reset_searches(config->orig);
-    else
-        nm_assert(!config->current);
-
-    if (config->current)
-        nm_ip_config_reset_searches(config->current);
-}
-
-static void
-applied_config_reset_nameservers(AppliedConfig *config)
-{
-    if (config->orig)
-        nm_ip_config_reset_nameservers(config->orig);
-    else
-        nm_assert(!config->current);
-
-    if (config->current)
-        nm_ip_config_reset_nameservers(config->current);
-}
-
-/*****************************************************************************/
-
-static NM_UTILS_LOOKUP_STR_DEFINE(
-    _sys_iface_state_to_str,
-    NMDeviceSysIfaceState,
-    NM_UTILS_LOOKUP_DEFAULT_NM_ASSERT("unknown"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_SYS_IFACE_STATE_EXTERNAL, "external"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_SYS_IFACE_STATE_ASSUME, "assume"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_SYS_IFACE_STATE_MANAGED, "managed"),
-    NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_SYS_IFACE_STATE_REMOVED, "removed"), );
-
-NMDeviceSysIfaceState
-nm_device_sys_iface_state_get(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), NM_DEVICE_SYS_IFACE_STATE_EXTERNAL);
-
-    return NM_DEVICE_GET_PRIVATE(self)->sys_iface_state;
-}
-
-gboolean
-nm_device_sys_iface_state_is_external(NMDevice *self)
-{
-    return NM_IN_SET(nm_device_sys_iface_state_get(self), NM_DEVICE_SYS_IFACE_STATE_EXTERNAL);
-}
-
-gboolean
-nm_device_sys_iface_state_is_external_or_assume(NMDevice *self)
-{
-    return NM_IN_SET(nm_device_sys_iface_state_get(self),
-                     NM_DEVICE_SYS_IFACE_STATE_EXTERNAL,
-                     NM_DEVICE_SYS_IFACE_STATE_ASSUME);
-}
-
-void
-nm_device_sys_iface_state_set(NMDevice *self, NMDeviceSysIfaceState sys_iface_state)
-{
-    NMDevicePrivate *priv;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-    g_return_if_fail(NM_IN_SET(sys_iface_state,
-                               NM_DEVICE_SYS_IFACE_STATE_EXTERNAL,
-                               NM_DEVICE_SYS_IFACE_STATE_ASSUME,
-                               NM_DEVICE_SYS_IFACE_STATE_MANAGED,
-                               NM_DEVICE_SYS_IFACE_STATE_REMOVED));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-    if (priv->sys_iface_state != sys_iface_state) {
-        _LOGT(LOGD_DEVICE,
-              "sys-iface-state: %s -> %s",
-              _sys_iface_state_to_str(priv->sys_iface_state),
-              _sys_iface_state_to_str(sys_iface_state));
-        priv->sys_iface_state_ = sys_iface_state;
-    }
-
-    /* this function only sets a flag, no immediate actions are initiated.
-     *
-     * If you change this, make sure that all callers are fine with such actions. */
-
-    nm_assert(priv->sys_iface_state == sys_iface_state);
-}
-
-static void
-_active_connection_set_state_flags_full(NMDevice *             self,
-                                        NMActivationStateFlags flags,
-                                        NMActivationStateFlags mask)
-{
-    NMActiveConnection *ac;
-
-    ac = NM_ACTIVE_CONNECTION(nm_device_get_act_request(self));
-    if (ac)
-        nm_active_connection_set_state_flags_full(ac, flags, mask);
-}
-
-static void
-_active_connection_set_state_flags(NMDevice *self, NMActivationStateFlags flags)
-{
-    _active_connection_set_state_flags_full(self, flags, flags);
-}
-
-/*****************************************************************************/
-
-void
-nm_device_assume_state_get(NMDevice *   self,
-                           gboolean *   out_assume_state_guess_assume,
-                           const char **out_assume_state_connection_uuid)
-{
-    NMDevicePrivate *priv;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-    NM_SET_OUT(out_assume_state_guess_assume, priv->assume_state_guess_assume);
-    NM_SET_OUT(out_assume_state_connection_uuid, priv->assume_state_connection_uuid);
-}
-
-static void
-_assume_state_set(NMDevice *  self,
-                  gboolean    assume_state_guess_assume,
-                  const char *assume_state_connection_uuid)
-{
-    NMDevicePrivate *priv;
-
-    nm_assert(NM_IS_DEVICE(self));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-    if (priv->assume_state_guess_assume == !!assume_state_guess_assume
-        && nm_streq0(priv->assume_state_connection_uuid, assume_state_connection_uuid))
-        return;
-
-    _LOGD(LOGD_DEVICE,
-          "assume-state: set guess-assume=%c, connection=%s%s%s",
-          assume_state_guess_assume ? '1' : '0',
-          NM_PRINT_FMT_QUOTE_STRING(assume_state_connection_uuid));
-    priv->assume_state_guess_assume = assume_state_guess_assume;
-    g_free(priv->assume_state_connection_uuid);
-    priv->assume_state_connection_uuid = g_strdup(assume_state_connection_uuid);
-}
-
-void
-nm_device_assume_state_reset(NMDevice *self)
-{
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    _assume_state_set(self, FALSE, NULL);
-}
-
-/*****************************************************************************/
-
-static void
-init_ip_config_dns_priority(NMDevice *self, NMIPConfig *config)
-{
-    const char *property;
-    int         priority;
-
-    property = (nm_ip_config_get_addr_family(config) == AF_INET)
-                   ? NM_CON_DEFAULT("ipv4.dns-priority")
-                   : NM_CON_DEFAULT("ipv6.dns-priority");
-
-    priority = nm_config_data_get_connection_default_int64(NM_CONFIG_GET_DATA,
-                                                           property,
-                                                           self,
-                                                           G_MININT,
-                                                           G_MAXINT,
-                                                           0);
-
-    if (priority == 0) {
-        priority =
-            nm_device_is_vpn(self) ? NM_DNS_PRIORITY_DEFAULT_VPN : NM_DNS_PRIORITY_DEFAULT_NORMAL;
-    }
-
-    nm_ip_config_set_dns_priority(config, priority);
-}
-
-/*****************************************************************************/
-
-static char *
-nm_device_sysctl_ip_conf_get(NMDevice *self, int addr_family, const char *property)
-{
-    const char *ifname;
-
-    nm_assert_addr_family(addr_family);
-
-    ifname = nm_device_get_ip_iface_from_platform(self);
-    if (!ifname)
-        return NULL;
-    return nm_platform_sysctl_ip_conf_get(nm_device_get_platform(self),
-                                          addr_family,
-                                          ifname,
-                                          property);
-}
-
-static gint64
-nm_device_sysctl_ip_conf_get_int_checked(NMDevice *  self,
-                                         int         addr_family,
-                                         const char *property,
-                                         guint       base,
-                                         gint64      min,
-                                         gint64      max,
-                                         gint64      fallback)
-{
-    const char *ifname;
-
-    nm_assert_addr_family(addr_family);
-
-    ifname = nm_device_get_ip_iface_from_platform(self);
-    if (!ifname) {
-        errno = EINVAL;
-        return fallback;
-    }
-    return nm_platform_sysctl_ip_conf_get_int_checked(nm_device_get_platform(self),
-                                                      addr_family,
-                                                      ifname,
-                                                      property,
-                                                      base,
-                                                      min,
-                                                      max,
-                                                      fallback);
-}
-
-static void
-set_ipv6_token(NMDevice *self, NMUtilsIPv6IfaceId iid, const char *token_str)
-{
-    NMPlatform *          platform;
-    int                   ifindex;
-    const NMPlatformLink *link;
-    char                  buf[32];
-    gint64                val;
-
-    /* Setting the kernel token is not strictly necessary as the
-     * IPv6 address is generated in userspace. However it is
-     * convenient so that users can see the token with iproute
-     * ('ip token'). */
-    platform = nm_device_get_platform(self);
-    ifindex  = nm_device_get_ip_ifindex(self);
-    link     = nm_platform_link_get(platform, ifindex);
-
-    if (link && link->inet6_token.id == iid.id) {
-        _LOGT(LOGD_DEVICE | LOGD_IP6, "token %s already set", token_str);
-        return;
-    }
-
-    /* The kernel allows setting a token only when 'accept_ra'
-     * is 1: temporarily flip it if necessary; unfortunately
-     * this will also generate an additional Router Solicitation
-     * from kernel. */
-    val = nm_device_sysctl_ip_conf_get_int_checked(self,
-                                                   AF_INET6,
-                                                   "accept_ra",
-                                                   10,
-                                                   G_MININT32,
-                                                   G_MAXINT32,
-                                                   1);
-    if (val != 1)
-        nm_device_sysctl_ip_conf_set(self, AF_INET6, "accept_ra", "1");
-
-    nm_platform_link_set_ipv6_token(platform, ifindex, iid);
-
-    if (val != 1) {
-        nm_sprintf_buf(buf, "%d", (int) val);
-        nm_device_sysctl_ip_conf_set(self, AF_INET6, "accept_ra", buf);
-    }
-}
-
-gboolean
-nm_device_sysctl_ip_conf_set(NMDevice *  self,
-                             int         addr_family,
-                             const char *property,
-                             const char *value)
-{
-    NMPlatform *  platform      = nm_device_get_platform(self);
-    gs_free char *value_to_free = NULL;
-    const char *  ifname;
-
-    nm_assert_addr_family(addr_family);
-
-    ifname = nm_device_get_ip_iface_from_platform(self);
-    if (!ifname)
-        return FALSE;
-
-    if (!value) {
-        /* Set to a default value when we've got a NULL @value. */
-        value_to_free = nm_platform_sysctl_ip_conf_get(platform, addr_family, "default", property);
-        value         = value_to_free;
-        if (!value)
-            return FALSE;
-    }
-
-    return nm_platform_sysctl_ip_conf_set(platform, addr_family, ifname, property, value);
-}
-
-/*****************************************************************************/
-
-gboolean
-nm_device_has_capability(NMDevice *self, NMDeviceCapabilities caps)
-{
-    return NM_FLAGS_ANY(NM_DEVICE_GET_PRIVATE(self)->capabilities, caps);
-}
-
-static void
-_add_capabilities(NMDevice *self, NMDeviceCapabilities capabilities)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!NM_FLAGS_ALL(priv->capabilities, capabilities)) {
-        priv->capabilities |= capabilities;
-        _notify(self, PROP_CAPABILITIES);
-    }
-}
-
-/*****************************************************************************/
-
-static NM_UTILS_LOOKUP_STR_DEFINE(_ip_state_to_string,
-                                  NMDeviceIPState,
-                                  NM_UTILS_LOOKUP_DEFAULT_WARN("unknown"),
-                                  NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_IP_STATE_NONE, "none"),
-                                  NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_IP_STATE_WAIT, "wait"),
-                                  NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_IP_STATE_CONF, "conf"),
-                                  NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_IP_STATE_DONE, "done"),
-                                  NM_UTILS_LOOKUP_STR_ITEM(NM_DEVICE_IP_STATE_FAIL, "fail"), );
-
-static void
-_set_ip_state(NMDevice *self, int addr_family, NMDeviceIPState new_state)
-{
-    NMDevicePrivate *priv    = NM_DEVICE_GET_PRIVATE(self);
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-
-    nm_assert_addr_family(addr_family);
-
-    if (priv->ip_state_x[IS_IPv4] == new_state)
-        return;
-
-    _LOGT(LOGD_DEVICE,
-          "ip%c-state: set to %d (%s)",
-          nm_utils_addr_family_to_char(addr_family),
-          (int) new_state,
-          _ip_state_to_string(new_state));
-
-    priv->ip_state_x_[IS_IPv4] = new_state;
-
-    if (new_state == NM_DEVICE_IP_STATE_DONE) {
-        /* we only set the IPx_READY flag once we reach NM_DEVICE_IP_STATE_DONE state. We don't
-         * ever clear it, even if we later enter NM_DEVICE_IP_STATE_FAIL state.
-         *
-         * This is not documented/guaranteed behavior, but seems to make sense for now. */
-        _active_connection_set_state_flags(self,
-                                           addr_family == AF_INET
-                                               ? NM_ACTIVATION_STATE_FLAG_IP4_READY
-                                               : NM_ACTIVATION_STATE_FLAG_IP6_READY);
-    }
-}
-
-/*****************************************************************************/
-
-const char *
-nm_device_get_udi(NMDevice *self)
-{
-    g_return_val_if_fail(self != NULL, NULL);
-
-    return NM_DEVICE_GET_PRIVATE(self)->udi;
-}
-
-const char *
-nm_device_get_iface(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), NULL);
-
-    return NM_DEVICE_GET_PRIVATE(self)->iface;
-}
-
-static gboolean
-_set_ifindex(NMDevice *self, int ifindex, gboolean is_ip_ifindex)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    int *            p_ifindex;
-
-    if (ifindex < 0)
-        ifindex = 0;
-
-    p_ifindex = is_ip_ifindex ? &priv->ip_ifindex_ : &priv->ifindex_;
-
-    if (*p_ifindex == ifindex)
-        return FALSE;
-
-    *p_ifindex = ifindex;
-
-    _LOGD(LOGD_DEVICE, "ifindex: set %sifindex %d", is_ip_ifindex ? "ip-" : "", ifindex);
-
-    if (!is_ip_ifindex)
-        _notify(self, PROP_IFINDEX);
-
-    return TRUE;
-}
-
-/**
- * nm_device_take_over_link:
- * @self: the #NMDevice
- * @ifindex: a ifindex
- * @old_name: (transfer full): on return, the name of the old link, if
- *   the link was renamed
- * @error: location to store error, or %NULL
- *
- * Given an existing link, move it under the control of a device. In
- * particular, the link will be renamed to match the device name. If the
- * link was renamed, the old name is returned in @old_name.
- *
- * Returns: %TRUE if the device took control of the link, %FALSE otherwise
- */
-gboolean
-nm_device_take_over_link(NMDevice *self, int ifindex, char **old_name, GError **error)
-{
-    NMDevicePrivate *     priv = NM_DEVICE_GET_PRIVATE(self);
-    const NMPlatformLink *plink;
-    NMPlatform *          platform;
-
-    nm_assert(ifindex > 0);
-    NM_SET_OUT(old_name, NULL);
-
-    if (priv->ifindex > 0 && priv->ifindex != ifindex) {
-        nm_utils_error_set(error,
-                           NM_UTILS_ERROR_UNKNOWN,
-                           "the device already has ifindex %d",
-                           priv->ifindex);
-        return FALSE;
-    }
-
-    platform = nm_device_get_platform(self);
-    plink    = nm_platform_link_get(platform, ifindex);
-    if (!plink) {
-        nm_utils_error_set(error, NM_UTILS_ERROR_UNKNOWN, "link %d not found", ifindex);
-        return FALSE;
-    }
-
-    if (!nm_streq(plink->name, nm_device_get_iface(self))) {
-        gboolean      up;
-        gboolean      success;
-        gs_free char *name = NULL;
-
-        up   = NM_FLAGS_HAS(plink->n_ifi_flags, IFF_UP);
-        name = g_strdup(plink->name);
-
-        /* Rename the link to the device ifname */
-        if (up)
-            nm_platform_link_set_down(platform, ifindex);
-        success = nm_platform_link_set_name(platform, ifindex, nm_device_get_iface(self));
-        if (up)
-            nm_platform_link_set_up(platform, ifindex, NULL);
-
-        if (!success) {
-            nm_utils_error_set(error, NM_UTILS_ERROR_UNKNOWN, "failure renaming link %d", ifindex);
-            return FALSE;
-        }
-
-        NM_SET_OUT(old_name, g_steal_pointer(&name));
-    }
-
-    _set_ifindex(self, ifindex, FALSE);
-
-    return TRUE;
-}
-
-int
-nm_device_get_ifindex(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), 0);
-
-    return NM_DEVICE_GET_PRIVATE(self)->ifindex;
-}
-
-/**
- * nm_device_is_software:
- * @self: the #NMDevice
- *
- * Indicates if the device is a software-based virtual device without
- * backing hardware, which can be added and removed programmatically.
- *
- * Returns: %TRUE if the device is a software-based device
- */
-gboolean
-nm_device_is_software(NMDevice *self)
-{
-    return NM_FLAGS_HAS(NM_DEVICE_GET_PRIVATE(self)->capabilities, NM_DEVICE_CAP_IS_SOFTWARE);
-}
-
-/**
- * nm_device_is_real:
- * @self: the #NMDevice
- *
- * Returns: %TRUE if the device exists, %FALSE if the device is a placeholder
- */
-gboolean
-nm_device_is_real(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    return NM_DEVICE_GET_PRIVATE(self)->real;
-}
-
-const char *
-nm_device_get_ip_iface(NMDevice *self)
-{
-    NMDevicePrivate *priv;
-
-    g_return_val_if_fail(self != NULL, NULL);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-    /* If it's not set, default to iface */
-    return priv->ip_iface ?: priv->iface;
-}
-
-const char *
-nm_device_get_ip_iface_from_platform(NMDevice *self)
-{
-    int ifindex;
-
-    ifindex = nm_device_get_ip_ifindex(self);
-    if (ifindex <= 0)
-        return NULL;
-
-    return nm_platform_link_get_name(nm_device_get_platform(self), ifindex);
-}
-
-int
-nm_device_get_ip_ifindex(const NMDevice *self)
-{
-    const NMDevicePrivate *priv;
-
-    g_return_val_if_fail(self != NULL, 0);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-    /* If it's not set, default to ifindex */
-    return priv->ip_iface ? priv->ip_ifindex : priv->ifindex;
-}
-
-static void
-_set_ip_ifindex(NMDevice *self, int ifindex, const char *ifname)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    NMPlatform *     platform;
-    gboolean         eq_name;
-
-    /* normalize arguments */
-    if (ifindex <= 0) {
-        ifindex = 0;
-        ifname  = NULL;
-    }
-
-    eq_name = nm_streq0(priv->ip_iface, ifname);
-
-    if (eq_name && priv->ip_ifindex == ifindex)
-        return;
-
-    _LOGD(LOGD_DEVICE,
-          "ip-ifindex: update ip-interface to %s%s%s, ifindex %d",
-          NM_PRINT_FMT_QUOTE_STRING(ifname),
-          ifindex);
-
-    _set_ifindex(self, ifindex, TRUE);
-
-    if (!eq_name) {
-        g_free(priv->ip_iface_);
-        priv->ip_iface_ = g_strdup(ifname);
-        _notify(self, PROP_IP_IFACE);
-    }
-
-    if (priv->ip_ifindex > 0) {
-        platform = nm_device_get_platform(self);
-
-        nm_platform_process_events_ensure_link(platform, priv->ip_ifindex, priv->ip_iface);
-
-        if (nm_platform_kernel_support_get(NM_PLATFORM_KERNEL_SUPPORT_TYPE_USER_IPV6LL))
-            nm_platform_link_set_user_ipv6ll_enabled(platform, priv->ip_ifindex, TRUE);
-
-        if (!nm_platform_link_is_up(platform, priv->ip_ifindex))
-            nm_platform_link_set_up(platform, priv->ip_ifindex, NULL);
-    }
-
-    /* We don't care about any saved values from the old iface */
-    g_hash_table_remove_all(priv->ip6_saved_properties);
-}
-
-gboolean
-nm_device_set_ip_ifindex(NMDevice *self, int ifindex)
-{
-    char        ifname_buf[IFNAMSIZ];
-    const char *ifname = NULL;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-    g_return_val_if_fail(nm_device_is_activating(self), FALSE);
-
-    if (ifindex > 0) {
-        ifname = nm_platform_if_indextoname(nm_device_get_platform(self), ifindex, ifname_buf);
-        if (!ifname)
-            _LOGW(LOGD_DEVICE, "ip-ifindex: ifindex %d not found", ifindex);
-    }
-
-    _set_ip_ifindex(self, ifindex, ifname);
-    return ifindex > 0;
-}
-
-/**
- * nm_device_set_ip_iface:
- * @self: the #NMDevice
- * @ifname: the new IP interface name
- *
- * Updates the IP interface name and possibly the ifindex.
- *
- * Returns: %TRUE if an interface with name @ifname exists,
- *   and %FALSE, if @ifname is %NULL or no such interface exists.
- */
-gboolean
-nm_device_set_ip_iface(NMDevice *self, const char *ifname)
-{
-    int ifindex = 0;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-    g_return_val_if_fail(nm_device_is_activating(self), FALSE);
-
-    if (ifname) {
-        ifindex = nm_platform_if_nametoindex(nm_device_get_platform(self), ifname);
-        if (ifindex <= 0)
-            _LOGW(LOGD_DEVICE, "ip-ifindex: ifname %s not found", ifname);
-    }
-
-    _set_ip_ifindex(self, ifindex, ifname);
-    return ifindex > 0;
-}
-
-/*****************************************************************************/
-
-int
-nm_device_parent_get_ifindex(NMDevice *self)
-{
-    NMDevicePrivate *priv;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), 0);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-    return priv->parent_ifindex;
-}
-
-NMDevice *
-nm_device_parent_get_device(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), NULL);
-
-    return NM_DEVICE_GET_PRIVATE(self)->parent_device.obj;
-}
-
-static void
-parent_changed_notify(NMDevice *self,
-                      int       old_ifindex,
-                      NMDevice *old_parent,
-                      int       new_ifindex,
-                      NMDevice *new_parent)
-{
-    /* empty handler to allow subclasses to always chain up the virtual function. */
-}
-
-static gboolean
-_parent_set_ifindex(NMDevice *self, int parent_ifindex, gboolean force_check)
-{
-    NMDevicePrivate *priv;
-    NMDevice *       parent_device;
-    gboolean         changed = FALSE;
-    int              old_ifindex;
-    gs_unref_object NMDevice *old_device = NULL;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (parent_ifindex <= 0)
-        parent_ifindex = 0;
-
-    old_ifindex = priv->parent_ifindex;
-
-    if (priv->parent_ifindex == parent_ifindex) {
-        if (parent_ifindex > 0) {
-            if (!force_check && priv->parent_device.obj
-                && nm_device_get_ifindex(priv->parent_device.obj) == parent_ifindex)
-                return FALSE;
-        } else {
-            if (!priv->parent_device.obj)
-                return FALSE;
-        }
-    } else {
-        priv->parent_ifindex = parent_ifindex;
-        changed              = TRUE;
-    }
-
-    if (parent_ifindex > 0) {
-        parent_device = nm_manager_get_device_by_ifindex(NM_MANAGER_GET, parent_ifindex);
-        if (parent_device == self)
-            parent_device = NULL;
-    } else
-        parent_device = NULL;
-
-    if (parent_device != priv->parent_device.obj) {
-        old_device = nm_g_object_ref(priv->parent_device.obj);
-        nm_dbus_track_obj_path_set(&priv->parent_device, parent_device, TRUE);
-        changed = TRUE;
-    }
-
-    if (changed) {
-        if (priv->parent_ifindex <= 0)
-            _LOGD(LOGD_DEVICE, "parent: clear");
-        else if (!priv->parent_device.obj)
-            _LOGD(LOGD_DEVICE, "parent: ifindex %d, no device", priv->parent_ifindex);
-        else {
-            _LOGD(LOGD_DEVICE,
-                  "parent: ifindex %d, device %p, %s",
-                  priv->parent_ifindex,
-                  priv->parent_device.obj,
-                  nm_device_get_iface(priv->parent_device.obj));
-        }
-
-        NM_DEVICE_GET_CLASS(self)->parent_changed_notify(self,
-                                                         old_ifindex,
-                                                         old_device,
-                                                         priv->parent_ifindex,
-                                                         priv->parent_device.obj);
-    }
-    return changed;
-}
-
-void
-nm_device_parent_set_ifindex(NMDevice *self, int parent_ifindex)
-{
-    _parent_set_ifindex(self, parent_ifindex, FALSE);
-}
-
-gboolean
-nm_device_parent_notify_changed(NMDevice *self, NMDevice *change_candidate, gboolean device_removed)
-{
-    NMDevicePrivate *priv;
-
-    nm_assert(NM_IS_DEVICE(self));
-    nm_assert(NM_IS_DEVICE(change_candidate));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->parent_ifindex > 0) {
-        if (priv->parent_device.obj == change_candidate
-            || priv->parent_ifindex == nm_device_get_ifindex(change_candidate))
-            return _parent_set_ifindex(self, priv->parent_ifindex, device_removed);
-    }
-    return FALSE;
-}
-
-/*****************************************************************************/
-
-const char *
-nm_device_parent_find_for_connection(NMDevice *self, const char *current_setting_parent)
-{
-    const char *new_parent;
-    NMDevice *  parent_device;
-
-    parent_device = nm_device_parent_get_device(self);
-    if (!parent_device)
-        return NULL;
-
-    new_parent = nm_device_get_iface(parent_device);
-    if (!new_parent)
-        return NULL;
-
-    if (current_setting_parent && !nm_streq(current_setting_parent, new_parent)
-        && nm_utils_is_uuid(current_setting_parent)) {
-        NMSettingsConnection *parent_connection;
-
-        /* Don't change a parent specified by UUID if it's still valid */
-        parent_connection = nm_settings_get_connection_by_uuid(nm_device_get_settings(self),
-                                                               current_setting_parent);
-        if (parent_connection
-            && nm_device_check_connection_compatible(
-                parent_device,
-                nm_settings_connection_get_connection(parent_connection),
-                NULL))
-            return current_setting_parent;
-    }
-
-    return new_parent;
-}
-
-/*****************************************************************************/
-
-static void
-_stats_update_counters(NMDevice *self, guint64 tx_bytes, guint64 rx_bytes)
-{
-    NMDevicePrivate *priv;
-    gboolean         tx_changed = FALSE;
-    gboolean         rx_changed = FALSE;
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->stats.tx_bytes != tx_bytes) {
-        priv->stats.tx_bytes = tx_bytes;
-        tx_changed           = TRUE;
-    }
-    if (priv->stats.rx_bytes != rx_bytes) {
-        priv->stats.rx_bytes = rx_bytes;
-        rx_changed           = TRUE;
-    }
-
-    nm_gobject_notify_together(self,
-                               tx_changed ? PROP_STATISTICS_TX_BYTES : PROP_0,
-                               rx_changed ? PROP_STATISTICS_RX_BYTES : PROP_0);
-}
-
-static void
-_stats_update_counters_from_pllink(NMDevice *self, const NMPlatformLink *pllink)
-{
-    _stats_update_counters(self, pllink->tx_bytes, pllink->rx_bytes);
-}
-
-static gboolean
-_stats_timeout_cb(gpointer user_data)
-{
-    NMDevice *self = user_data;
-    int       ifindex;
-
-    ifindex = nm_device_get_ip_ifindex(self);
-
-    _LOGT(LOGD_DEVICE, "stats: refresh %d", ifindex);
-
-    if (ifindex > 0)
-        nm_platform_link_refresh(nm_device_get_platform(self), ifindex);
-
-    return G_SOURCE_CONTINUE;
-}
-
-static guint
-_stats_refresh_rate_real(guint refresh_rate_ms)
-{
-    const guint STATS_REFRESH_RATE_MS_MIN = 200;
-
-    if (refresh_rate_ms == 0)
-        return 0;
-
-    if (refresh_rate_ms < STATS_REFRESH_RATE_MS_MIN) {
-        /* you cannot set the refresh-rate arbitrarily small. E.g.
-         * setting to 1ms is just killing. Have a lowest number. */
-        return STATS_REFRESH_RATE_MS_MIN;
-    }
-
-    return refresh_rate_ms;
-}
-
-static void
-_stats_set_refresh_rate(NMDevice *self, guint refresh_rate_ms)
-{
-    NMDevicePrivate *priv;
-    int              ifindex;
-    guint            old_rate;
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->stats.refresh_rate_ms == refresh_rate_ms)
-        return;
-
-    old_rate                    = priv->stats.refresh_rate_ms;
-    priv->stats.refresh_rate_ms = refresh_rate_ms;
-    _notify(self, PROP_STATISTICS_REFRESH_RATE_MS);
-
-    _LOGD(LOGD_DEVICE, "stats: set refresh to %u ms", priv->stats.refresh_rate_ms);
-
-    if (!nm_device_is_real(self))
-        return;
-
-    refresh_rate_ms = _stats_refresh_rate_real(refresh_rate_ms);
-    if (_stats_refresh_rate_real(old_rate) == refresh_rate_ms)
-        return;
-
-    nm_clear_g_source(&priv->stats.timeout_id);
-
-    if (!refresh_rate_ms)
-        return;
-
-    /* trigger an initial refresh of the data whenever the refresh-rate changes.
-     * As we process the result in an idle handler with device_link_changed(),
-     * we don't get the result right away. */
-    ifindex = nm_device_get_ip_ifindex(self);
-    if (ifindex > 0)
-        nm_platform_link_refresh(nm_device_get_platform(self), ifindex);
-
-    priv->stats.timeout_id = g_timeout_add(refresh_rate_ms, _stats_timeout_cb, self);
-}
-
-/*****************************************************************************/
-
-static gboolean
-get_ip_iface_identifier(NMDevice *self, NMUtilsIPv6IfaceId *out_iid)
-{
-    NMDevicePrivate *     priv     = NM_DEVICE_GET_PRIVATE(self);
-    NMPlatform *          platform = nm_device_get_platform(self);
-    const NMPlatformLink *pllink;
-    const guint8 *        hwaddr;
-    guint8                pseudo_hwaddr[ETH_ALEN];
-    gsize                 hwaddr_len;
-    int                   ifindex;
-    gboolean              success;
-
-    /* If we get here, we *must* have a kernel netdev, which implies an ifindex */
-    ifindex = nm_device_get_ip_ifindex(self);
-    g_return_val_if_fail(ifindex > 0, FALSE);
-
-    pllink = nm_platform_link_get(platform, ifindex);
-    if (!pllink || NM_IN_SET(pllink->type, NM_LINK_TYPE_NONE, NM_LINK_TYPE_UNKNOWN))
-        return FALSE;
-
-    hwaddr = nmp_link_address_get(&pllink->l_address, &hwaddr_len);
-    if (hwaddr_len <= 0)
-        return FALSE;
-
-    if (pllink->type == NM_LINK_TYPE_6LOWPAN) {
-        /* If the underlying IEEE 802.15.4 device has a short address we generate
-         * a "pseudo 48-bit address" that's to be used in the same fashion as a
-         * wired Ethernet address. The mechanism is specified in Section 6. of
-         * RFC 4944 */
-        guint16 pan_id;
-        guint16 short_addr;
-
-        short_addr = nm_platform_wpan_get_short_addr(platform, pllink->parent);
-        if (short_addr != G_MAXUINT16) {
-            pan_id           = nm_platform_wpan_get_pan_id(platform, pllink->parent);
-            pseudo_hwaddr[0] = short_addr & 0xff;
-            pseudo_hwaddr[1] = (short_addr >> 8) & 0xff;
-            pseudo_hwaddr[2] = 0;
-            pseudo_hwaddr[3] = 0;
-            pseudo_hwaddr[4] = pan_id & 0xff;
-            pseudo_hwaddr[5] = (pan_id >> 8) & 0xff;
-
-            hwaddr     = pseudo_hwaddr;
-            hwaddr_len = G_N_ELEMENTS(pseudo_hwaddr);
-        }
-    }
-
-    success = nm_utils_get_ipv6_interface_identifier(pllink->type,
-                                                     hwaddr,
-                                                     hwaddr_len,
-                                                     priv->dev_id,
-                                                     out_iid);
-    if (!success) {
-        _LOGW(LOGD_PLATFORM,
-              "failed to generate interface identifier "
-              "for link type %u hwaddr_len %zu",
-              pllink->type,
-              hwaddr_len);
-    }
-    return success;
-}
-
-/**
- * nm_device_get_ip_iface_identifier:
- * @self: an #NMDevice
- * @iid: where to place the interface identifier
- * @ignore_token: force creation of a non-tokenized address
- *
- * Return the interface's identifier for the EUI64 address generation mode.
- * It's either a manually set token or and identifier generated in a
- * hardware-specific way.
- *
- * Unless @ignore_token is set the token is preferred. That is the case
- * for link-local addresses (to mimic kernel behavior).
- *
- * Returns: #TRUE if the @iid could be set
- */
-static gboolean
-nm_device_get_ip_iface_identifier(NMDevice *self, NMUtilsIPv6IfaceId *iid, gboolean ignore_token)
-{
-    NMSettingIP6Config *s_ip6;
-    const char *        token = NULL;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    if (!ignore_token) {
-        s_ip6 = nm_device_get_applied_setting(self, NM_TYPE_SETTING_IP6_CONFIG);
-
-        g_return_val_if_fail(s_ip6, FALSE);
-
-        token = nm_setting_ip6_config_get_token(s_ip6);
-    }
-    if (token)
-        return nm_utils_ipv6_interface_identifier_get_from_token(iid, token);
-    else
-        return NM_DEVICE_GET_CLASS(self)->get_ip_iface_identifier(self, iid);
-}
-
-const char *
-nm_device_get_driver(NMDevice *self)
-{
-    g_return_val_if_fail(self != NULL, NULL);
-
-    return NM_DEVICE_GET_PRIVATE(self)->driver;
-}
-
-const char *
-nm_device_get_driver_version(NMDevice *self)
-{
-    g_return_val_if_fail(self != NULL, NULL);
-
-    return NM_DEVICE_GET_PRIVATE(self)->driver_version;
-}
-
-NMDeviceType
-nm_device_get_device_type(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), NM_DEVICE_TYPE_UNKNOWN);
-
-    return NM_DEVICE_GET_PRIVATE(self)->type;
-}
-
-NMLinkType
-nm_device_get_link_type(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), NM_LINK_TYPE_UNKNOWN);
-
-    return NM_DEVICE_GET_PRIVATE(self)->link_type;
-}
-
-/**
- * nm_device_get_metered:
- * @setting: the #NMDevice
- *
- * Returns: the #NMDevice:metered property of the device.
- *
- * Since: 1.2
- **/
-NMMetered
-nm_device_get_metered(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), NM_METERED_UNKNOWN);
-
-    return NM_DEVICE_GET_PRIVATE(self)->metered;
-}
-
-guint32
-nm_device_get_route_metric_default(NMDeviceType device_type)
-{
-    /* Device 'priority' is used for the default route-metric and is based on
-     * the device type. The settings ipv4.route-metric and ipv6.route-metric
-     * can overwrite this default.
-     *
-     * For both IPv4 and IPv6 we use the same default values.
-     *
-     * The route-metric is used for the metric of the routes of device.
-     * This also applies to the default route. Therefore it affects also
-     * which device is the "best".
-     *
-     * For comparison, note that iproute2 by default adds IPv4 routes with
-     * metric 0, and IPv6 routes with metric 1024. The latter is the IPv6
-     * "user default" in the kernel (NM_PLATFORM_ROUTE_METRIC_DEFAULT_IP6).
-     * In kernel, the full uint32_t range is available for route
-     * metrics (except for IPv6, where 0 means 1024).
-     */
-
-    switch (device_type) {
-    /* 50 is also used for VPN plugins (NM_VPN_ROUTE_METRIC_DEFAULT).
-     *
-     * Note that returning 50 from this function means that this device-type is
-     * in some aspects a VPN. */
-    case NM_DEVICE_TYPE_WIREGUARD:
-        return NM_VPN_ROUTE_METRIC_DEFAULT;
-
-    case NM_DEVICE_TYPE_ETHERNET:
-    case NM_DEVICE_TYPE_VETH:
-        return 100;
-    case NM_DEVICE_TYPE_MACSEC:
-        return 125;
-    case NM_DEVICE_TYPE_INFINIBAND:
-        return 150;
-    case NM_DEVICE_TYPE_ADSL:
-        return 200;
-    case NM_DEVICE_TYPE_WIMAX:
-        return 250;
-    case NM_DEVICE_TYPE_BOND:
-        return 300;
-    case NM_DEVICE_TYPE_TEAM:
-        return 350;
-    case NM_DEVICE_TYPE_VLAN:
-        return 400;
-    case NM_DEVICE_TYPE_MACVLAN:
-        return 410;
-    case NM_DEVICE_TYPE_BRIDGE:
-        return 425;
-    case NM_DEVICE_TYPE_TUN:
-        return 450;
-    case NM_DEVICE_TYPE_PPP:
-        return 460;
-    case NM_DEVICE_TYPE_VRF:
-        return 470;
-    case NM_DEVICE_TYPE_VXLAN:
-        return 500;
-    case NM_DEVICE_TYPE_DUMMY:
-        return 550;
-    case NM_DEVICE_TYPE_WIFI:
-        return 600;
-    case NM_DEVICE_TYPE_OLPC_MESH:
-        return 650;
-    case NM_DEVICE_TYPE_IP_TUNNEL:
-        return 675;
-    case NM_DEVICE_TYPE_MODEM:
-        return 700;
-    case NM_DEVICE_TYPE_BT:
-        return 750;
-    case NM_DEVICE_TYPE_6LOWPAN:
-        return 775;
-    case NM_DEVICE_TYPE_OVS_BRIDGE:
-    case NM_DEVICE_TYPE_OVS_INTERFACE:
-    case NM_DEVICE_TYPE_OVS_PORT:
-        return 800;
-    case NM_DEVICE_TYPE_WPAN:
-        return 850;
-    case NM_DEVICE_TYPE_WIFI_P2P:
-    case NM_DEVICE_TYPE_GENERIC:
-        return 950;
-    case NM_DEVICE_TYPE_UNKNOWN:
-        return 10000;
-    case NM_DEVICE_TYPE_UNUSED1:
-    case NM_DEVICE_TYPE_UNUSED2:
-        /* omit default: to get compiler warning about missing switch cases */
-        break;
-    }
-    return 11000;
-}
-
-static gboolean
-default_route_metric_penalty_detect(NMDevice *self, int addr_family)
-{
-    NMDevicePrivate *priv    = NM_DEVICE_GET_PRIVATE(self);
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-
-    /* currently we don't differentiate between IPv4 and IPv6 when detecting
-     * connectivity. */
-    if (priv->concheck_x[IS_IPv4].state != NM_CONNECTIVITY_FULL
-        && nm_connectivity_check_enabled(concheck_get_mgr(self)))
-        return TRUE;
-
-    return FALSE;
-}
-
-static guint32
-default_route_metric_penalty_get(NMDevice *self, int addr_family)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    nm_assert_addr_family(addr_family);
-
-    if (addr_family == AF_INET ? priv->default_route_metric_penalty_ip4_has
-                               : priv->default_route_metric_penalty_ip6_has)
-        return 20000;
-    return 0;
-}
-
-guint32
-nm_device_get_route_metric(NMDevice *self, int addr_family)
-{
-    gint64             route_metric;
-    NMSettingIPConfig *s_ip;
-    NMConnection *     connection;
-    const char *       property;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), G_MAXUINT32);
-    g_return_val_if_fail(NM_IN_SET(addr_family, AF_INET, AF_INET6), G_MAXUINT32);
-
-    connection = nm_device_get_applied_connection(self);
-    if (connection) {
-        s_ip = nm_connection_get_setting_ip_config(connection, addr_family);
-
-        /* Slave interfaces don't have IP settings, but we may get here when
-         * external changes are made or when noticing IP changes when starting
-         * the slave connection.
-         */
-        if (s_ip) {
-            route_metric = nm_setting_ip_config_get_route_metric(s_ip);
-            if (route_metric >= 0)
-                goto out;
-        }
-    }
-
-    /* use the current NMConfigData, which makes this configuration reloadable.
-     * Note that that means that the route-metric might change between SIGHUP.
-     * You must cache the returned value if that is a problem. */
-    property     = addr_family == AF_INET ? NM_CON_DEFAULT("ipv4.route-metric")
-                                          : NM_CON_DEFAULT("ipv6.route-metric");
-    route_metric = nm_config_data_get_connection_default_int64(NM_CONFIG_GET_DATA,
-                                                               property,
-                                                               self,
-                                                               0,
-                                                               G_MAXUINT32,
-                                                               -1);
-    if (route_metric >= 0)
-        goto out;
-
-    route_metric = nm_manager_device_route_metric_reserve(NM_MANAGER_GET,
-                                                          nm_device_get_ip_ifindex(self),
-                                                          nm_device_get_device_type(self));
-out:
-    return nm_utils_ip_route_metric_normalize(addr_family, route_metric);
-}
-
-guint32
-nm_device_get_route_table(NMDevice *self, int addr_family)
-{
-    guint32 route_table;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), RT_TABLE_MAIN);
-
-    route_table = _prop_get_ipvx_route_table(self, addr_family);
-    return route_table ?: (guint32) RT_TABLE_MAIN;
-}
-
-static NMIPRouteTableSyncMode
-_get_route_table_sync_mode_stateful(NMDevice *self, int addr_family)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    NMDedupMultiIter ipconf_iter;
-    gboolean         all_sync_now;
-    gboolean         all_sync_eff;
-
-    all_sync_now = _prop_get_ipvx_route_table(self, addr_family) != 0u;
-
-    if (!all_sync_now) {
-        /* If there's a local route switch to all-sync in order
-         * to properly manage the local table */
-        if (addr_family == AF_INET) {
-            const NMPlatformIP4Route *route;
-
-            nm_ip_config_iter_ip4_route_for_each (&ipconf_iter, priv->con_ip_config_4, &route) {
-                if (nm_platform_route_type_uncoerce(route->type_coerced) == RTN_LOCAL) {
-                    all_sync_now = TRUE;
-                    break;
-                }
-            }
-        } else {
-            const NMPlatformIP6Route *route;
-
-            nm_ip_config_iter_ip6_route_for_each (&ipconf_iter, priv->con_ip_config_6, &route) {
-                if (nm_platform_route_type_uncoerce(route->type_coerced) == RTN_LOCAL) {
-                    all_sync_now = TRUE;
-                    break;
-                }
-            }
-        }
-    }
-
-    if (all_sync_now)
-        all_sync_eff = TRUE;
-    else {
-        /* When we change from all-sync to no all-sync, we do a last all-sync one
-         * more time. For that, we determine the effective all-state based on the
-         * cached/previous all-sync flag.
-         *
-         * The purpose of this is to support reapply of route-table (and thus the
-         * all-sync mode). If reapply toggles from all-sync to no-all-sync, we must
-         * sync one last time. */
-        if (addr_family == AF_INET)
-            all_sync_eff = priv->v4_route_table_all_sync_before;
-        else
-            all_sync_eff = priv->v6_route_table_all_sync_before;
-    }
-
-    if (addr_family == AF_INET)
-        priv->v4_route_table_all_sync_before = all_sync_now;
-    else
-        priv->v6_route_table_all_sync_before = all_sync_now;
-
-    return all_sync_eff ? NM_IP_ROUTE_TABLE_SYNC_MODE_ALL : NM_IP_ROUTE_TABLE_SYNC_MODE_MAIN;
-}
-
-const NMPObject *
-nm_device_get_best_default_route(NMDevice *self, int addr_family)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    switch (addr_family) {
-    case AF_INET:
-        return priv->ip_config_4 ? nm_ip4_config_best_default_route_get(priv->ip_config_4) : NULL;
-    case AF_INET6:
-        return priv->ip_config_6 ? nm_ip6_config_best_default_route_get(priv->ip_config_6) : NULL;
-    case AF_UNSPEC:
-        return (priv->ip_config_4 ? nm_ip4_config_best_default_route_get(priv->ip_config_4) : NULL)
-                   ?: (priv->ip_config_6 ? nm_ip6_config_best_default_route_get(priv->ip_config_6)
-                                         : NULL);
-    default:
-        g_return_val_if_reached(NULL);
-    }
-}
-
-const char *
-nm_device_get_type_desc(NMDevice *self)
-{
-    g_return_val_if_fail(self != NULL, NULL);
-
-    return NM_DEVICE_GET_PRIVATE(self)->type_desc;
-}
-
-const char *
-nm_device_get_type_description(NMDevice *self)
-{
-    g_return_val_if_fail(self != NULL, NULL);
-
-    /* Beware: this function should return the same
-     * value as nm_device_get_type_description() in libnm. */
-
-    return NM_DEVICE_GET_CLASS(self)->get_type_description(self);
-}
-
-static const char *
-get_type_description(NMDevice *self)
-{
-    NMDeviceClass *klass;
-
-    nm_assert(NM_IS_DEVICE(self));
-
-    /* the default implementation for the description just returns the (modified)
-     * class name and depends entirely on the type of self. Note that we cache the
-     * description in the klass itself.
-     *
-     * Also note, that as the GObject class gets inited, it inherrits the fields
-     * of the parent class. That means, if NMDeviceVethClass was initialized after
-     * NMDeviceEthernetClass already has the description cached in the class
-     * (because we already fetched the description for an ethernet device),
-     * then default_type_description will wrongly contain "ethernet".
-     * To avoid that, and catch the situation, also cache the klass for
-     * which the description was cached. If that doesn't match, it was
-     * inherited and we need to reset it. */
-    klass = NM_DEVICE_GET_CLASS(self);
-    if (G_UNLIKELY(klass->default_type_description_klass != klass)) {
-        const char *typename;
-        gs_free char *s = NULL;
-
-        typename = G_OBJECT_TYPE_NAME(self);
-        if (g_str_has_prefix(typename, "NMDevice"))
-            typename += 8;
-        s                                     = g_ascii_strdown(typename, -1);
-        klass->default_type_description       = g_intern_string(s);
-        klass->default_type_description_klass = klass;
-    }
-
-    nm_assert(klass->default_type_description);
-    return klass->default_type_description;
-}
-
-gboolean
-nm_device_has_carrier(NMDevice *self)
-{
-    return NM_DEVICE_GET_PRIVATE(self)->carrier;
-}
-
-NMActRequest *
-nm_device_get_act_request(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), NULL);
-
-    return NM_DEVICE_GET_PRIVATE(self)->act_request.obj;
-}
-
-NMActivationStateFlags
-nm_device_get_activation_state_flags(NMDevice *self)
-{
-    NMActRequest *ac;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), NM_ACTIVATION_STATE_FLAG_NONE);
-
-    ac = NM_DEVICE_GET_PRIVATE(self)->act_request.obj;
-    if (!ac)
-        return NM_ACTIVATION_STATE_FLAG_NONE;
-    return nm_active_connection_get_state_flags(NM_ACTIVE_CONNECTION(ac));
-}
-
-NMSettingsConnection *
-nm_device_get_settings_connection(NMDevice *self)
-{
-    NMDevicePrivate *priv;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), NULL);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    return priv->act_request.obj ? nm_act_request_get_settings_connection(priv->act_request.obj)
-                                 : NULL;
-}
-
-NMConnection *
-nm_device_get_settings_connection_get_connection(NMDevice *self)
-{
-    NMSettingsConnection *sett_con;
-    NMDevicePrivate *     priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!priv->act_request.obj)
-        return NULL;
-
-    sett_con = nm_act_request_get_settings_connection(priv->act_request.obj);
-    if (!sett_con)
-        return NULL;
-
-    return nm_settings_connection_get_connection(sett_con);
-}
-
-NMConnection *
-nm_device_get_applied_connection(NMDevice *self)
-{
-    NMDevicePrivate *priv;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), NULL);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    return priv->act_request.obj ? nm_act_request_get_applied_connection(priv->act_request.obj)
-                                 : NULL;
-}
-
-gboolean
-nm_device_has_unmodified_applied_connection(NMDevice *self, NMSettingCompareFlags compare_flags)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!priv->act_request.obj)
-        return FALSE;
-
-    return nm_active_connection_has_unmodified_applied_connection(
-        (NMActiveConnection *) priv->act_request.obj,
-        compare_flags);
-}
-
-gpointer
-nm_device_get_applied_setting(NMDevice *self, GType setting_type)
-{
-    NMConnection *connection;
-
-    connection = nm_device_get_applied_connection(self);
-    return connection ? nm_connection_get_setting(connection, setting_type) : NULL;
-}
-
-RfKillType
-nm_device_get_rfkill_type(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    return NM_DEVICE_GET_PRIVATE(self)->rfkill_type;
-}
-
-static const char *
-nm_device_get_physical_port_id(NMDevice *self)
-{
-    return NM_DEVICE_GET_PRIVATE(self)->physical_port_id;
-}
-
-/*****************************************************************************/
-
-typedef enum {
-    CONCHECK_SCHEDULE_UPDATE_INTERVAL,
-    CONCHECK_SCHEDULE_UPDATE_INTERVAL_RESTART,
-    CONCHECK_SCHEDULE_CHECK_EXTERNAL,
-    CONCHECK_SCHEDULE_CHECK_PERIODIC,
-    CONCHECK_SCHEDULE_RETURNED_MIN,
-    CONCHECK_SCHEDULE_RETURNED_BUMP,
-    CONCHECK_SCHEDULE_RETURNED_MAX,
-} ConcheckScheduleMode;
-
-static NMDeviceConnectivityHandle *concheck_start(NMDevice *                   self,
-                                                  int                          addr_family,
-                                                  NMDeviceConnectivityCallback callback,
-                                                  gpointer                     user_data,
-                                                  gboolean                     is_periodic);
-
-static void
-concheck_periodic_schedule_set(NMDevice *self, int addr_family, ConcheckScheduleMode mode);
-
-static gboolean
-_concheck_periodic_timeout_cb(NMDevice *self, int addr_family)
-{
-    _LOGt(LOGD_CONCHECK,
-          "connectivity: [IPv%c] periodic timeout",
-          nm_utils_addr_family_to_char(addr_family));
-    concheck_periodic_schedule_set(self, addr_family, CONCHECK_SCHEDULE_CHECK_PERIODIC);
-    return G_SOURCE_REMOVE;
-}
-
-static gboolean
-concheck_ip4_periodic_timeout_cb(gpointer user_data)
-{
-    return _concheck_periodic_timeout_cb(user_data, AF_INET);
-}
-
-static gboolean
-concheck_ip6_periodic_timeout_cb(gpointer user_data)
-{
-    return _concheck_periodic_timeout_cb(user_data, AF_INET6);
-}
-
-static gboolean
-concheck_is_possible(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!nm_device_is_real(self) || is_loopback(self))
-        return FALSE;
-
-    /* we enable periodic checks for every device state (except UNKNOWN). Especially with
-     * unmanaged devices, it is interesting to know whether we have connectivity on that device. */
-    if (priv->state == NM_DEVICE_STATE_UNKNOWN)
-        return FALSE;
-
-    return TRUE;
-}
-
-static gboolean
-concheck_periodic_schedule_do(NMDevice *self, int addr_family, gint64 now_ns)
-{
-    NMDevicePrivate *priv                    = NM_DEVICE_GET_PRIVATE(self);
-    gboolean         periodic_check_disabled = FALSE;
-    gint64           expiry, tdiff;
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-
-    /* we always cancel whatever was pending. */
-    if (nm_clear_g_source(&priv->concheck_x[IS_IPv4].p_cur_id))
-        periodic_check_disabled = TRUE;
-
-    if (priv->concheck_x[IS_IPv4].p_max_interval == 0) {
-        /* periodic checks are disabled */
-        goto out;
-    }
-
-    if (!concheck_is_possible(self))
-        goto out;
-
-    nm_assert(now_ns > 0);
-    nm_assert(priv->concheck_x[IS_IPv4].p_cur_interval > 0);
-
-    /* we schedule the timeout based on our current settings cur-interval and cur-basetime.
-     * Before calling concheck_periodic_schedule_do(), make sure that these properties are
-     * correct. */
-
-    expiry = priv->concheck_x[IS_IPv4].p_cur_basetime_ns
-             + (priv->concheck_x[IS_IPv4].p_cur_interval * NM_UTILS_NSEC_PER_SEC);
-    tdiff = expiry - now_ns;
-
-    _LOGT(LOGD_CONCHECK,
-          "connectivity: [IPv%c] periodic-check: %sscheduled in %lld milliseconds (%u seconds "
-          "interval)",
-          nm_utils_addr_family_to_char(addr_family),
-          periodic_check_disabled ? "re-" : "",
-          (long long) (tdiff / NM_UTILS_NSEC_PER_MSEC),
-          priv->concheck_x[IS_IPv4].p_cur_interval);
-
-    priv->concheck_x[IS_IPv4].p_cur_id =
-        g_timeout_add(NM_MAX((gint64) 0, tdiff) / NM_UTILS_NSEC_PER_MSEC,
-                      IS_IPv4 ? concheck_ip4_periodic_timeout_cb : concheck_ip6_periodic_timeout_cb,
-                      self);
-    return TRUE;
-out:
-    if (periodic_check_disabled) {
-        _LOGT(LOGD_CONCHECK,
-              "connectivity: [IPv%c] periodic-check: unscheduled",
-              nm_utils_addr_family_to_char(addr_family));
-    }
-    return FALSE;
-}
-
-#define CONCHECK_P_PROBE_INTERVAL 1
-
-static void
-concheck_periodic_schedule_set(NMDevice *self, int addr_family, ConcheckScheduleMode mode)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    gint64           new_expiry, exp_expiry, cur_expiry, tdiff;
-    gint64           now_ns  = 0;
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-
-    if (priv->concheck_x[IS_IPv4].p_max_interval == 0) {
-        /* periodic check is disabled. Nothing to do. */
-        return;
-    }
-
-    if (!priv->concheck_x[IS_IPv4].p_cur_id) {
-        /* we currently don't have a timeout scheduled. No need to reschedule
-         * another one... */
-        if (NM_IN_SET(mode,
-                      CONCHECK_SCHEDULE_UPDATE_INTERVAL,
-                      CONCHECK_SCHEDULE_UPDATE_INTERVAL_RESTART)) {
-            /* ... unless, we are about to start periodic checks after update-interval.
-             * In this case, fall through and restart the periodic checks below. */
-            mode = CONCHECK_SCHEDULE_UPDATE_INTERVAL_RESTART;
-        } else
-            return;
-    }
-
-    switch (mode) {
-    case CONCHECK_SCHEDULE_UPDATE_INTERVAL_RESTART:
-        priv->concheck_x[IS_IPv4].p_cur_interval =
-            NM_MIN(priv->concheck_x[IS_IPv4].p_max_interval, CONCHECK_P_PROBE_INTERVAL);
-        priv->concheck_x[IS_IPv4].p_cur_basetime_ns =
-            nm_utils_get_monotonic_timestamp_nsec_cached(&now_ns);
-        if (concheck_periodic_schedule_do(self, addr_family, now_ns))
-            concheck_start(self, addr_family, NULL, NULL, TRUE);
-        return;
-
-    case CONCHECK_SCHEDULE_UPDATE_INTERVAL:
-        /* called with "UPDATE_INTERVAL" and already have a p_cur_id scheduled. */
-
-        nm_assert(priv->concheck_x[IS_IPv4].p_max_interval > 0);
-        nm_assert(priv->concheck_x[IS_IPv4].p_cur_interval > 0);
-
-        if (priv->concheck_x[IS_IPv4].p_cur_interval <= priv->concheck_x[IS_IPv4].p_max_interval) {
-            /* we currently have a shorter interval set, than what we now have. Either,
-             * because we are probing, or because the previous max interval was shorter.
-             *
-             * Either way, the current timer is set just fine. Nothing to do, we will
-             * probe our way up. */
-            return;
-        }
-
-        cur_expiry = priv->concheck_x[IS_IPv4].p_cur_basetime_ns
-                     + (priv->concheck_x[IS_IPv4].p_max_interval * NM_UTILS_NSEC_PER_SEC);
-        nm_utils_get_monotonic_timestamp_nsec_cached(&now_ns);
-
-        priv->concheck_x[IS_IPv4].p_cur_interval = priv->concheck_x[IS_IPv4].p_max_interval;
-        if (cur_expiry <= now_ns) {
-            /* Since the last time we scheduled a periodic check, already more than the
-             * new max_interval passed. We need to start a check right away (and
-             * schedule a timeout in cur-interval in the future). */
-            priv->concheck_x[IS_IPv4].p_cur_basetime_ns = now_ns;
-            if (concheck_periodic_schedule_do(self, addr_family, now_ns))
-                concheck_start(self, addr_family, NULL, NULL, TRUE);
-        } else {
-            /* we are reducing the max-interval to a shorter interval that we have currently
-             * scheduled (with cur_interval).
-             *
-             * However, since the last time we scheduled the check, not even the new max-interval
-             * expired. All we need to do, is reschedule the timer to expire sooner. The cur_basetime
-             * is unchanged. */
-            concheck_periodic_schedule_do(self, addr_family, now_ns);
-        }
-        return;
-
-    case CONCHECK_SCHEDULE_CHECK_EXTERNAL:
-        /* a external connectivity check delays our periodic check. We reset the counter. */
-        priv->concheck_x[IS_IPv4].p_cur_basetime_ns =
-            nm_utils_get_monotonic_timestamp_nsec_cached(&now_ns);
-        concheck_periodic_schedule_do(self, addr_family, now_ns);
-        return;
-
-    case CONCHECK_SCHEDULE_CHECK_PERIODIC:
-    {
-        gboolean                    any_periodic_pending;
-        NMDeviceConnectivityHandle *handle;
-        guint                       old_interval = priv->concheck_x[IS_IPv4].p_cur_interval;
-
-        any_periodic_pending = FALSE;
-        c_list_for_each_entry (handle, &priv->concheck_lst_head, concheck_lst) {
-            if (handle->addr_family != addr_family)
-                continue;
-            if (handle->is_periodic_bump) {
-                handle->is_periodic_bump             = FALSE;
-                handle->is_periodic_bump_on_complete = FALSE;
-                any_periodic_pending                 = TRUE;
-            }
-        }
-        if (any_periodic_pending) {
-            /* we reached a timeout to schedule a new periodic request, however we still
-             * have period requests pending that didn't complete yet. We need to bump the
-             * interval already. */
-            priv->concheck_x[IS_IPv4].p_cur_interval =
-                NM_MIN(old_interval * 2, priv->concheck_x[IS_IPv4].p_max_interval);
-        }
-
-        /* we just reached a timeout. The expected expiry (exp_expiry) should be
-         * pretty close to now_ns.
-         *
-         * We want to reschedule the timeout at exp_expiry (aka now) + cur_interval. */
-        nm_utils_get_monotonic_timestamp_nsec_cached(&now_ns);
-        exp_expiry =
-            priv->concheck_x[IS_IPv4].p_cur_basetime_ns + (old_interval * NM_UTILS_NSEC_PER_SEC);
-        new_expiry =
-            exp_expiry + (priv->concheck_x[IS_IPv4].p_cur_interval * NM_UTILS_NSEC_PER_SEC);
-        tdiff = NM_MAX(new_expiry - now_ns, 0);
-        priv->concheck_x[IS_IPv4].p_cur_basetime_ns =
-            (now_ns + tdiff) - (priv->concheck_x[IS_IPv4].p_cur_interval * NM_UTILS_NSEC_PER_SEC);
-        if (concheck_periodic_schedule_do(self, addr_family, now_ns)) {
-            handle = concheck_start(self, addr_family, NULL, NULL, TRUE);
-            if (old_interval != priv->concheck_x[IS_IPv4].p_cur_interval) {
-                /* we just bumped the interval already when scheduling this check.
-                 * When the handle returns, don't bump a second time.
-                 *
-                 * But if we reach the timeout again before the handle returns (this
-                 * code here) we will still bump the interval. */
-                handle->is_periodic_bump_on_complete = FALSE;
-            }
-        }
-        return;
-    }
-
-    /* we just got an event that we lost connectivity (that is, concheck returned). We reset
-     * the interval to min/max or increase the probe interval (bump). */
-    case CONCHECK_SCHEDULE_RETURNED_MIN:
-        priv->concheck_x[IS_IPv4].p_cur_interval =
-            NM_MIN(priv->concheck_x[IS_IPv4].p_max_interval, CONCHECK_P_PROBE_INTERVAL);
-        break;
-    case CONCHECK_SCHEDULE_RETURNED_MAX:
-        priv->concheck_x[IS_IPv4].p_cur_interval = priv->concheck_x[IS_IPv4].p_max_interval;
-        break;
-    case CONCHECK_SCHEDULE_RETURNED_BUMP:
-        priv->concheck_x[IS_IPv4].p_cur_interval =
-            NM_MIN(priv->concheck_x[IS_IPv4].p_cur_interval * 2,
-                   priv->concheck_x[IS_IPv4].p_max_interval);
-        break;
-    }
-
-    /* we are here, because we returned from a connectivity check and adjust the current interval.
-     *
-     * But note that we calculate the new timeout based on the time when we scheduled the
-     * last check, instead of counting from now. The reason is that we want that the times
-     * when we schedule checks be at precise intervals, without including the time it took for
-     * the connectivity check. */
-    new_expiry = priv->concheck_x[IS_IPv4].p_cur_basetime_ns
-                 + (priv->concheck_x[IS_IPv4].p_cur_interval * NM_UTILS_NSEC_PER_SEC);
-    tdiff = NM_MAX(new_expiry - nm_utils_get_monotonic_timestamp_nsec_cached(&now_ns), 0);
-    priv->concheck_x[IS_IPv4].p_cur_basetime_ns =
-        now_ns + tdiff - (priv->concheck_x[IS_IPv4].p_cur_interval * NM_UTILS_NSEC_PER_SEC);
-    concheck_periodic_schedule_do(self, addr_family, now_ns);
-}
-
-static void
-concheck_update_interval(NMDevice *self, int addr_family, gboolean check_now)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    guint            new_interval;
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-
-    new_interval = nm_connectivity_get_interval(concheck_get_mgr(self));
-
-    new_interval = NM_MIN(new_interval, 7 * 24 * 3600);
-
-    if (new_interval != priv->concheck_x[IS_IPv4].p_max_interval) {
-        _LOGT(LOGD_CONCHECK,
-              "connectivity: [IPv%c] periodic-check: set interval to %u seconds",
-              nm_utils_addr_family_to_char(addr_family),
-              new_interval);
-        priv->concheck_x[IS_IPv4].p_max_interval = new_interval;
-    }
-
-    if (!new_interval) {
-        /* this will cancel any potentially pending timeout because max-interval is zero.
-         * But it logs a nice message... */
-        concheck_periodic_schedule_do(self, addr_family, 0);
-
-        /* also update the fake connectivity state. */
-        concheck_update_state(self, addr_family, NM_CONNECTIVITY_FAKE, TRUE);
-        return;
-    }
-
-    concheck_periodic_schedule_set(self,
-                                   addr_family,
-                                   check_now ? CONCHECK_SCHEDULE_UPDATE_INTERVAL_RESTART
-                                             : CONCHECK_SCHEDULE_UPDATE_INTERVAL);
-}
-
-void
-nm_device_check_connectivity_update_interval(NMDevice *self)
-{
-    concheck_update_interval(self, AF_INET, TRUE);
-    concheck_update_interval(self, AF_INET6, TRUE);
-}
-
-static void
-concheck_update_state(NMDevice *          self,
-                      int                 addr_family,
-                      NMConnectivityState state,
-                      gboolean            allow_periodic_bump)
-{
-    NMDevicePrivate *priv    = NM_DEVICE_GET_PRIVATE(self);
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-
-    /* @state is a result of the connectivity check. We only expect a precise
-     * number of possible values. */
-    nm_assert(NM_IN_SET(state,
-                        NM_CONNECTIVITY_LIMITED,
-                        NM_CONNECTIVITY_PORTAL,
-                        NM_CONNECTIVITY_FULL,
-                        NM_CONNECTIVITY_FAKE,
-                        NM_CONNECTIVITY_NONE,
-                        NM_CONNECTIVITY_ERROR));
-
-    if (state == NM_CONNECTIVITY_ERROR) {
-        /* on error, we don't change the current connectivity state,
-         * except making UNKNOWN to NONE. */
-        state = priv->concheck_x[IS_IPv4].state;
-        if (state == NM_CONNECTIVITY_UNKNOWN)
-            state = NM_CONNECTIVITY_NONE;
-    } else if (state == NM_CONNECTIVITY_FAKE) {
-        /* If the connectivity check is disabled and we obtain a fake
-         * result, make an optimistic guess. */
-        if (priv->state == NM_DEVICE_STATE_ACTIVATED) {
-            /* FIXME: the fake connectivity state depends on the availability of
-             * a default route. However, we have no mechanism that rechecks the
-             * value if a device route appears/disappears after the device
-             * was activated. */
-            if (nm_device_get_best_default_route(self, AF_UNSPEC))
-                state = NM_CONNECTIVITY_FULL;
-            else
-                state = NM_CONNECTIVITY_LIMITED;
-        } else
-            state = NM_CONNECTIVITY_NONE;
-    }
-
-    if (priv->concheck_x[IS_IPv4].state == state) {
-        /* we got a connectivity update, but the state didn't change. If we were probing,
-         * we bump the probe frequency. */
-        if (allow_periodic_bump)
-            concheck_periodic_schedule_set(self, addr_family, CONCHECK_SCHEDULE_RETURNED_BUMP);
-        return;
-    }
-    /* we need to update the probe interval before emitting signals. Emitting
-     * a signal might call back into NMDevice and change the probe settings.
-     * So, do that first. */
-    if (state == NM_CONNECTIVITY_FULL) {
-        /* we reached full connectivity state. Stop probing by setting the
-         * interval to the max. */
-        concheck_periodic_schedule_set(self, addr_family, CONCHECK_SCHEDULE_RETURNED_MAX);
-    } else if (priv->concheck_x[IS_IPv4].state == NM_CONNECTIVITY_FULL) {
-        /* we are about to loose connectivity. (re)start probing by setting
-         * the timeout interval to the min. */
-        concheck_periodic_schedule_set(self, addr_family, CONCHECK_SCHEDULE_RETURNED_MIN);
-    } else {
-        if (allow_periodic_bump)
-            concheck_periodic_schedule_set(self, addr_family, CONCHECK_SCHEDULE_RETURNED_BUMP);
-    }
-
-    _LOGD(LOGD_CONCHECK,
-          "connectivity state changed from %s to %s",
-          nm_connectivity_state_to_string(priv->concheck_x[IS_IPv4].state),
-          nm_connectivity_state_to_string(state));
-    priv->concheck_x[IS_IPv4].state = state;
-
-    _notify(self, IS_IPv4 ? PROP_IP4_CONNECTIVITY : PROP_IP6_CONNECTIVITY);
-
-    if (priv->state == NM_DEVICE_STATE_ACTIVATED && !nm_device_sys_iface_state_is_external(self)) {
-        if (nm_device_get_best_default_route(self, AF_INET)
-            && !ip_config_merge_and_apply(self, AF_INET, TRUE))
-            _LOGW(LOGD_IP4, "Failed to update IPv4 route metric");
-        if (nm_device_get_best_default_route(self, AF_INET6)
-            && !ip_config_merge_and_apply(self, AF_INET6, TRUE))
-            _LOGW(LOGD_IP6, "Failed to update IPv6 route metric");
-    }
-}
-
-static const char *
-nm_device_get_effective_ip_config_method(NMDevice *self, int addr_family)
-{
-    NMDeviceClass *klass;
-    NMConnection * connection = nm_device_get_applied_connection(self);
-    const char *   method;
-
-    g_return_val_if_fail(NM_IS_CONNECTION(connection), "" /* bogus */);
-    nm_assert_addr_family(addr_family);
-
-    method = nm_utils_get_ip_config_method(connection, addr_family);
-
-    if ((addr_family == AF_INET && nm_streq(method, NM_SETTING_IP4_CONFIG_METHOD_AUTO))
-        || (addr_family == AF_INET6 && nm_streq(method, NM_SETTING_IP6_CONFIG_METHOD_AUTO))) {
-        klass = NM_DEVICE_GET_CLASS(self);
-        if (klass->get_auto_ip_config_method) {
-            const char *auto_method;
-
-            auto_method = klass->get_auto_ip_config_method(self, addr_family);
-            if (auto_method)
-                return auto_method;
-        }
-    }
-
-    return method;
-}
-
-static void
-concheck_handle_complete(NMDeviceConnectivityHandle *handle, GError *error)
-{
-    const gboolean IS_IPv4 = (handle->addr_family == AF_INET);
-
-    /* The moment we invoke the callback, we unlink it. It signals
-     * that @handle is handled -- as far as the callee of callback
-     * is concerned. */
-    c_list_unlink(&handle->concheck_lst);
-
-    if (handle->c_handle)
-        nm_connectivity_check_cancel(handle->c_handle);
-
-    if (handle->callback) {
-        handle->callback(handle->self,
-                         handle,
-                         NM_DEVICE_GET_PRIVATE(handle->self)->concheck_x[IS_IPv4].state,
-                         error,
-                         handle->user_data);
-    }
-
-    g_slice_free(NMDeviceConnectivityHandle, handle);
-}
-
-static void
-concheck_cb(NMConnectivity *           connectivity,
-            NMConnectivityCheckHandle *c_handle,
-            NMConnectivityState        state,
-            gpointer                   user_data)
-{
-    _nm_unused gs_unref_object NMDevice *self_keep_alive = NULL;
-    NMDevice *                           self;
-    NMDevicePrivate *                    priv;
-    NMDeviceConnectivityHandle *         handle;
-    NMDeviceConnectivityHandle *         other_handle;
-    gboolean                             handle_is_alive;
-    gboolean                             allow_periodic_bump;
-    gboolean                             any_periodic_before;
-    gboolean                             any_periodic_after;
-    guint64                              seq;
-
-    handle = user_data;
-    nm_assert(handle->c_handle == c_handle);
-    nm_assert(NM_IS_DEVICE(handle->self));
-
-    handle->c_handle = NULL;
-    self             = handle->self;
-
-    if (state == NM_CONNECTIVITY_CANCELLED) {
-        /* the only place where we nm_connectivity_check_cancel(@c_handle), is
-         * from inside concheck_handle_complete(). This is a recursive call,
-         * nothing to do. */
-        _LOGT(LOGD_CONCHECK,
-              "connectivity: [IPv%c] complete check (seq:%llu, cancelled)",
-              nm_utils_addr_family_to_char(handle->addr_family),
-              (long long unsigned) handle->seq);
-        return;
-    }
-
-    /* we keep NMConnectivity instance alive. It cannot be disposing. */
-    nm_assert(state != NM_CONNECTIVITY_DISPOSING);
-
-    self_keep_alive = g_object_ref(self);
-
-    /* keep @self alive, while we invoke callbacks. */
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    nm_assert(handle && c_list_contains(&priv->concheck_lst_head, &handle->concheck_lst));
-
-    seq = handle->seq;
-
-    _LOGT(LOGD_CONCHECK,
-          "connectivity: [Ipv%c] complete check (seq:%llu, state:%s)",
-          nm_utils_addr_family_to_char(handle->addr_family),
-          (long long unsigned) handle->seq,
-          nm_connectivity_state_to_string(state));
-
-    /* find out, if there are any periodic checks pending (either whether they
-     * were scheduled before or after @handle. */
-    any_periodic_before = FALSE;
-    any_periodic_after  = FALSE;
-    c_list_for_each_entry (other_handle, &priv->concheck_lst_head, concheck_lst) {
-        if (other_handle->addr_family != handle->addr_family)
-            continue;
-        if (other_handle->is_periodic_bump_on_complete) {
-            if (other_handle->seq < seq)
-                any_periodic_before = TRUE;
-            else if (other_handle->seq > seq)
-                any_periodic_after = TRUE;
-        }
-    }
-    if (NM_IN_SET(state, NM_CONNECTIVITY_ERROR)) {
-        /* the request failed. We consider this periodic check only as completed if
-         * this was a periodic check, and there are not checks pending (either
-         * before or after this one).
-         *
-         * We allow_periodic_bump, if the request failed and there are
-         * still other requests periodic pending. */
-        allow_periodic_bump =
-            handle->is_periodic_bump_on_complete && !any_periodic_before && !any_periodic_after;
-    } else {
-        /* the request succeeded. This marks the completion of a periodic check,
-         * if this handle was periodic, or any previously scheduled one (that
-         * we are going to complete below). */
-        allow_periodic_bump = handle->is_periodic_bump_on_complete || any_periodic_before;
-    }
-
-    /* first update the new state, and emit signals. */
-    concheck_update_state(self, handle->addr_family, state, allow_periodic_bump);
-
-    handle_is_alive = FALSE;
-
-    /* we might have invoked callbacks during concheck_update_state(). The caller might have
-     * cancelled and thus destroyed @handle. We have to check whether handle is still alive,
-     * by searching it in the list of alive handles.
-     *
-     * Also, we might want to complete all pending callbacks that were started before
-     * @handle, as they are automatically obsoleted. */
-check_handles:
-    c_list_for_each_entry (other_handle, &priv->concheck_lst_head, concheck_lst) {
-        if (other_handle->addr_family != handle->addr_family)
-            continue;
-        if (other_handle->seq >= seq) {
-            /* it's not guaranteed that @handle is still in the list. It might already
-             * be canceled while invoking callbacks for a previous other_handle.
-             * If it is already cancelled, @handle is a dangling pointer.
-             *
-             * Since @seq is assigned uniquely and increasing, either @other_handle is
-             * @handle (and thus, handle is alive), or it isn't. */
-            if (other_handle == handle)
-                handle_is_alive = TRUE;
-            break;
-        }
-
-        nm_assert(other_handle != handle);
-
-        if (!NM_IN_SET(state, NM_CONNECTIVITY_ERROR)) {
-            /* we also want to complete handles that were started before the current
-             * @handle. Their response is out-dated. */
-            concheck_handle_complete(other_handle, NULL);
-
-            /* we invoked callbacks, other handles might be cancelled and removed from the list.
-             * Need to iterate the list from the start. */
-            goto check_handles;
-        }
-    }
-
-    if (!handle_is_alive) {
-        /* We didn't find @handle in the list of alive handles. Thus, the handles
-         * was cancelled while we were invoking events. Nothing to do, and don't
-         * touch the dangling pointer. */
-        return;
-    }
-
-    concheck_handle_complete(handle, NULL);
-}
-
-static NMDeviceConnectivityHandle *
-concheck_start(NMDevice *                   self,
-               int                          addr_family,
-               NMDeviceConnectivityCallback callback,
-               gpointer                     user_data,
-               gboolean                     is_periodic)
-{
-    static guint64              seq_counter = 0;
-    NMDevicePrivate *           priv;
-    NMDeviceConnectivityHandle *handle;
-    const char *                ifname;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), NULL);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    handle                               = g_slice_new0(NMDeviceConnectivityHandle);
-    handle->seq                          = ++seq_counter;
-    handle->self                         = self;
-    handle->callback                     = callback;
-    handle->user_data                    = user_data;
-    handle->is_periodic                  = is_periodic;
-    handle->is_periodic_bump             = is_periodic;
-    handle->is_periodic_bump_on_complete = is_periodic;
-    handle->addr_family                  = addr_family;
-
-    c_list_link_tail(&priv->concheck_lst_head, &handle->concheck_lst);
-
-    _LOGT(LOGD_CONCHECK,
-          "connectivity: [IPv%c] start check (seq:%llu%s)",
-          nm_utils_addr_family_to_char(addr_family),
-          (long long unsigned) handle->seq,
-          is_periodic ? ", periodic-check" : "");
-
-    if (addr_family == AF_INET && !priv->concheck_rp_filter_checked) {
-        if ((ifname = nm_device_get_ip_iface_from_platform(self))) {
-            gboolean due_to_all;
-            int      val;
-
-            val = nm_platform_sysctl_ip_conf_get_rp_filter_ipv4(nm_device_get_platform(self),
-                                                                ifname,
-                                                                TRUE,
-                                                                &due_to_all);
-            if (val == 1) {
-                _LOGW(LOGD_CONCHECK,
-                      "connectivity: \"/proc/sys/net/ipv4/conf/%s/rp_filter\" is set to \"1\". "
-                      "This might break connectivity checking for IPv4 on this device",
-                      due_to_all ? "all" : ifname);
-            }
-        }
-
-        /* we only check once per device. It's a warning after all.  */
-        priv->concheck_rp_filter_checked = TRUE;
-    }
-
-    handle->c_handle = nm_connectivity_check_start(concheck_get_mgr(self),
-                                                   handle->addr_family,
-                                                   nm_device_get_platform(self),
-                                                   nm_device_get_ip_ifindex(self),
-                                                   nm_device_get_ip_iface(self),
-                                                   concheck_cb,
-                                                   handle);
-    return handle;
-}
-
-NMDeviceConnectivityHandle *
-nm_device_check_connectivity(NMDevice *                   self,
-                             int                          addr_family,
-                             NMDeviceConnectivityCallback callback,
-                             gpointer                     user_data)
-{
-    if (!concheck_is_possible(self))
-        return NULL;
-
-    concheck_periodic_schedule_set(self, addr_family, CONCHECK_SCHEDULE_CHECK_EXTERNAL);
-    return concheck_start(self, addr_family, callback, user_data, FALSE);
-}
-
-void
-nm_device_check_connectivity_cancel(NMDeviceConnectivityHandle *handle)
-{
-    gs_free_error GError *cancelled_error = NULL;
-
-    g_return_if_fail(handle);
-    g_return_if_fail(NM_IS_DEVICE(handle->self));
-    g_return_if_fail(!c_list_is_empty(&handle->concheck_lst));
-
-    /* nobody has access to periodic handles, and cannot cancel
-     * them externally. */
-    nm_assert(!handle->is_periodic);
-
-    nm_utils_error_set_cancelled(&cancelled_error, FALSE, "NMDevice");
-    concheck_handle_complete(handle, cancelled_error);
-}
-
-NMConnectivityState
-nm_device_get_connectivity_state(NMDevice *self, int addr_family)
-{
-    NMDevicePrivate *priv;
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), NM_CONNECTIVITY_UNKNOWN);
-    nm_assert_addr_family(addr_family);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    switch (addr_family) {
-    case AF_INET:
-    case AF_INET6:
-        return priv->concheck_x[IS_IPv4].state;
-    default:
-        nm_assert(addr_family == AF_UNSPEC);
-        return NM_MAX_WITH_CMP(nm_connectivity_state_cmp,
-                               priv->concheck_x[0].state,
-                               priv->concheck_x[1].state);
-    }
-}
-
-/*****************************************************************************/
-
-static SlaveInfo *
-find_slave_info(NMDevice *self, NMDevice *slave)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    CList *          iter;
-    SlaveInfo *      info;
-
-    c_list_for_each (iter, &priv->slaves) {
-        info = c_list_entry(iter, SlaveInfo, lst_slave);
-        if (info->slave == slave)
-            return info;
-    }
-    return NULL;
-}
-
-/**
- * nm_device_master_enslave_slave:
- * @self: the master device
- * @slave: the slave device to enslave
- * @connection: (allow-none): the slave device's connection
- *
- * If @self is capable of enslaving other devices (ie it's a bridge, bond, team,
- * etc) then this function enslaves @slave.
- *
- * Returns: %TRUE on success, %FALSE on failure or if this device cannot enslave
- *  other devices.
- */
-static gboolean
-nm_device_master_enslave_slave(NMDevice *self, NMDevice *slave, NMConnection *connection)
-{
-    NMDevicePrivate *priv;
-    SlaveInfo *      info;
-    gboolean         success = FALSE;
-    gboolean         configure;
-
-    g_return_val_if_fail(self != NULL, FALSE);
-    g_return_val_if_fail(slave != NULL, FALSE);
-    g_return_val_if_fail(NM_DEVICE_GET_CLASS(self)->enslave_slave != NULL, FALSE);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-    info = find_slave_info(self, slave);
-    if (!info)
-        return FALSE;
-
-    if (info->slave_is_enslaved)
-        success = TRUE;
-    else {
-        configure = (info->configure && connection != NULL);
-        if (configure)
-            g_return_val_if_fail(nm_device_get_state(slave) >= NM_DEVICE_STATE_DISCONNECTED, FALSE);
-
-        success = NM_DEVICE_GET_CLASS(self)->enslave_slave(self, slave, connection, configure);
-        info->slave_is_enslaved = success;
-    }
-
-    nm_device_slave_notify_enslave(info->slave, success);
-
-    /* Ensure the device's hardware address is up-to-date; it often changes
-     * when slaves change.
-     */
-    nm_device_update_hw_address(self);
-
-    /* Send ARP announcements if did not yet and have addresses. */
-    if (priv->ip_state_4 == NM_DEVICE_IP_STATE_DONE && !priv->acd.announcing)
-        nm_device_arp_announce(self);
-
-    /* Restart IP configuration if we're waiting for slaves.  Do this
-     * after updating the hardware address as IP config may need the
-     * new address.
-     */
-    if (success) {
-        if (priv->ip_state_4 == NM_DEVICE_IP_STATE_WAIT)
-            nm_device_activate_stage3_ip4_start(self);
-
-        if (priv->ip_state_6 == NM_DEVICE_IP_STATE_WAIT)
-            nm_device_activate_stage3_ip6_start(self);
-    }
-
-    /* Since slave devices don't have their own IP configuration,
-     * set the MTU here.
-     */
-    _commit_mtu(slave, NM_DEVICE_GET_PRIVATE(slave)->ip_config_4);
-
-    return success;
-}
-
-/**
- * nm_device_master_release_one_slave:
- * @self: the master device
- * @slave: the slave device to release
- * @configure: whether @self needs to actually release @slave
- * @force: force the release of @slave even if it wasn't added
- *         to @master by NetworkManager
- * @reason: the state change reason for the @slave
- *
- * If @self is capable of enslaving other devices (ie it's a bridge, bond, team,
- * etc) then this function releases the previously enslaved @slave and/or
- * updates the state of @self and @slave to reflect its release.
- */
-static void
-nm_device_master_release_one_slave(NMDevice *          self,
-                                   NMDevice *          slave,
-                                   gboolean            configure,
-                                   gboolean            force,
-                                   NMDeviceStateReason reason)
-{
-    NMDevicePrivate *priv;
-    NMDevicePrivate *slave_priv;
-    SlaveInfo *      info;
-    gs_unref_object NMDevice *self_free = NULL;
-
-    g_return_if_fail(NM_DEVICE(self));
-    g_return_if_fail(NM_DEVICE(slave));
-    g_return_if_fail(!force || configure);
-    g_return_if_fail(NM_DEVICE_GET_CLASS(self)->release_slave != NULL);
-
-    info = find_slave_info(self, slave);
-
-    _LOGT(LOGD_CORE,
-          "master: release one slave %p/%s %s%s",
-          slave,
-          nm_device_get_iface(slave),
-          !info ? "(not registered)" : (info->slave_is_enslaved ? "(enslaved)" : "(not enslaved)"),
-          force ? " (force-configure)" : (configure ? " (configure)" : ""));
-
-    if (!info)
-        g_return_if_reached();
-
-    priv       = NM_DEVICE_GET_PRIVATE(self);
-    slave_priv = NM_DEVICE_GET_PRIVATE(slave);
-
-    g_return_if_fail(self == slave_priv->master);
-    nm_assert(slave == info->slave);
-
-    /* first, let subclasses handle the release ... */
-    if (info->slave_is_enslaved || force)
-        NM_DEVICE_GET_CLASS(self)->release_slave(self, slave, configure);
-
-    /* raise notifications about the release, including clearing is_enslaved. */
-    nm_device_slave_notify_release(slave, reason);
-
-    /* keep both alive until the end of the function.
-     * Transfers ownership from slave_priv->master.  */
-    self_free = self;
-
-    c_list_unlink(&info->lst_slave);
-    slave_priv->master = NULL;
-
-    g_signal_handler_disconnect(slave, info->watch_id);
-    g_object_unref(slave);
-    g_slice_free(SlaveInfo, info);
-
-    if (c_list_is_empty(&priv->slaves)) {
-        _active_connection_set_state_flags_full(self,
-                                                0,
-                                                NM_ACTIVATION_STATE_FLAG_MASTER_HAS_SLAVES);
-    }
-
-    /* Ensure the device's hardware address is up-to-date; it often changes
-     * when slaves change.
-     */
-    nm_device_update_hw_address(self);
-    nm_device_set_unmanaged_by_flags(slave,
-                                     NM_UNMANAGED_IS_SLAVE,
-                                     NM_UNMAN_FLAG_OP_FORGET,
-                                     NM_DEVICE_STATE_REASON_REMOVED);
-}
-
-/**
- * can_unmanaged_external_down:
- * @self: the device
- *
- * Check whether the device should stay NM_UNMANAGED_EXTERNAL_DOWN unless
- * IFF_UP-ed externally.
- */
-static gboolean
-can_unmanaged_external_down(NMDevice *self)
-{
-    return !NM_DEVICE_GET_PRIVATE(self)->nm_owned && nm_device_is_software(self);
-}
-
-static NMUnmanFlagOp
-is_unmanaged_external_down(NMDevice *self, gboolean consider_can)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (consider_can && !NM_DEVICE_GET_CLASS(self)->can_unmanaged_external_down(self))
-        return NM_UNMAN_FLAG_OP_FORGET;
-
-    /* Manage externally-created software interfaces only when they are IFF_UP */
-    if (priv->ifindex <= 0 || !priv->up
-        || !(!c_list_is_empty(&priv->slaves)
-             || nm_platform_link_can_assume(nm_device_get_platform(self), priv->ifindex)))
-        return NM_UNMAN_FLAG_OP_SET_UNMANAGED;
-
-    return NM_UNMAN_FLAG_OP_SET_MANAGED;
-}
-
-static void
-set_unmanaged_external_down(NMDevice *self, gboolean only_if_unmanaged)
-{
-    NMUnmanFlagOp ext_flags;
-
-    if (!nm_device_get_unmanaged_mask(self, NM_UNMANAGED_EXTERNAL_DOWN))
-        return;
-
-    if (only_if_unmanaged) {
-        if (!nm_device_get_unmanaged_flags(self, NM_UNMANAGED_EXTERNAL_DOWN))
-            return;
-    }
-
-    ext_flags = is_unmanaged_external_down(self, FALSE);
-    if (ext_flags != NM_UNMAN_FLAG_OP_SET_UNMANAGED) {
-        /* Ensure the assume check is queued before any queued state changes
-         * from the transition to UNAVAILABLE.
-         */
-        nm_device_queue_recheck_assume(self);
-    }
-
-    nm_device_set_unmanaged_by_flags(self,
-                                     NM_UNMANAGED_EXTERNAL_DOWN,
-                                     ext_flags,
-                                     NM_DEVICE_STATE_REASON_CONNECTION_ASSUMED);
-}
-
-void
-nm_device_update_dynamic_ip_setup(NMDevice *self)
-{
-    NMDevicePrivate *priv;
-    GError *         error = NULL;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->state < NM_DEVICE_STATE_IP_CONFIG || priv->state > NM_DEVICE_STATE_ACTIVATED)
-        return;
-
-    g_hash_table_remove_all(priv->ip6_saved_properties);
-
-    if (priv->dhcp_data_4.client) {
-        if (!nm_device_dhcp4_renew(self, FALSE)) {
-            nm_device_state_changed(self,
-                                    NM_DEVICE_STATE_FAILED,
-                                    NM_DEVICE_STATE_REASON_DHCP_FAILED);
-            return;
-        }
-    }
-    if (priv->dhcp_data_6.client) {
-        if (!nm_device_dhcp6_renew(self, FALSE)) {
-            nm_device_state_changed(self,
-                                    NM_DEVICE_STATE_FAILED,
-                                    NM_DEVICE_STATE_REASON_DHCP_FAILED);
-            return;
-        }
-    }
-    if (priv->ndisc) {
-        /* FIXME: todo */
-    }
-    if (priv->dnsmasq_manager) {
-        /* FIXME: todo */
-    }
-
-    if (priv->lldp_listener && nm_lldp_listener_is_running(priv->lldp_listener)) {
-        nm_lldp_listener_stop(priv->lldp_listener);
-        if (!nm_lldp_listener_start(priv->lldp_listener, nm_device_get_ifindex(self), &error)) {
-            _LOGD(LOGD_DEVICE,
-                  "LLDP listener %p could not be restarted: %s",
-                  priv->lldp_listener,
-                  error->message);
-            g_clear_error(&error);
-        }
-    }
-}
-
-/*****************************************************************************/
-
-static void
-carrier_changed_notify(NMDevice *self, gboolean carrier)
-{
-    /* stub */
-}
-
-static void
-carrier_changed(NMDevice *self, gboolean carrier)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->state <= NM_DEVICE_STATE_UNMANAGED)
-        return;
-
-    nm_device_recheck_available_connections(self);
-
-    /* ignore-carrier devices ignore all carrier-down events */
-    if (priv->ignore_carrier && !carrier)
-        return;
-
-    if (nm_device_is_master(self)) {
-        if (carrier) {
-            /* Force master to retry getting ip addresses when carrier
-             * is restored. */
-            if (priv->state == NM_DEVICE_STATE_ACTIVATED)
-                nm_device_update_dynamic_ip_setup(self);
-            /* If needed, also resume IP configuration that is
-             * waiting for carrier. */
-            if (nm_device_activate_ip4_state_in_wait(self))
-                nm_device_activate_stage3_ip4_start(self);
-            if (nm_device_activate_ip6_state_in_wait(self))
-                nm_device_activate_stage3_ip6_start(self);
-            return;
-        }
-        /* fall-through and change state of device */
-    } else if (priv->is_enslaved && !carrier) {
-        /* Slaves don't deactivate when they lose carrier; for
-         * bonds/teams in particular that would be actively
-         * counterproductive.
-         */
-        return;
-    }
-
-    if (carrier) {
-        if (priv->state == NM_DEVICE_STATE_UNAVAILABLE) {
-            nm_device_queue_state(self,
-                                  NM_DEVICE_STATE_DISCONNECTED,
-                                  NM_DEVICE_STATE_REASON_CARRIER);
-        } else if (priv->state == NM_DEVICE_STATE_DISCONNECTED) {
-            /* If the device is already in DISCONNECTED state without a carrier
-             * (probably because it is tagged for carrier ignore) ensure that
-             * when the carrier appears, auto connections are rechecked for
-             * the device.
-             */
-            nm_device_emit_recheck_auto_activate(self);
-        } else if (priv->state == NM_DEVICE_STATE_ACTIVATED) {
-            /* If the device is active without a carrier (probably because it is
-             * tagged for carrier ignore) ensure that when the carrier appears we
-             * renew DHCP leases and such.
-             */
-            nm_device_update_dynamic_ip_setup(self);
-        }
-    } else {
-        if (priv->state == NM_DEVICE_STATE_UNAVAILABLE) {
-            if (priv->queued_state.id && priv->queued_state.state >= NM_DEVICE_STATE_DISCONNECTED)
-                queued_state_clear(self);
-        } else {
-            nm_device_queue_state(self,
-                                  NM_DEVICE_STATE_UNAVAILABLE,
-                                  NM_DEVICE_STATE_REASON_CARRIER);
-        }
-    }
-}
-
-static gboolean
-carrier_disconnected_action_cb(gpointer user_data)
-{
-    NMDevice *       self = NM_DEVICE(user_data);
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    _LOGD(LOGD_DEVICE,
-          "carrier: link disconnected (calling deferred action) (id=%u)",
-          priv->carrier_defer_id);
-
-    priv->carrier_defer_id = 0;
-    carrier_changed(self, FALSE);
-    return FALSE;
-}
-
-static void
-carrier_disconnected_action_cancel(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    guint            id   = priv->carrier_defer_id;
-
-    if (nm_clear_g_source(&priv->carrier_defer_id)) {
-        _LOGD(LOGD_DEVICE, "carrier: link disconnected (canceling deferred action) (id=%u)", id);
-    }
-}
-
-void
-nm_device_set_carrier(NMDevice *self, gboolean carrier)
-{
-    NMDevicePrivate *priv         = NM_DEVICE_GET_PRIVATE(self);
-    NMDeviceState    state        = nm_device_get_state(self);
-    gboolean         notify_flags = FALSE;
-
-    if (priv->carrier == carrier)
-        return;
-
-    if (NM_FLAGS_ALL(priv->capabilities,
-                     NM_DEVICE_CAP_CARRIER_DETECT | NM_DEVICE_CAP_NONSTANDARD_CARRIER)) {
-        if (carrier)
-            priv->interface_flags |= NM_DEVICE_INTERFACE_FLAG_CARRIER;
-        else
-            priv->interface_flags &= ~NM_DEVICE_INTERFACE_FLAG_CARRIER;
-        notify_flags = TRUE;
-    }
-
-    priv->carrier = carrier;
-    if (notify_flags)
-        nm_gobject_notify_together(self, PROP_CARRIER, PROP_INTERFACE_FLAGS);
-    else
-        _notify(self, PROP_CARRIER);
-
-    if (priv->carrier) {
-        _LOGI(LOGD_DEVICE, "carrier: link connected");
-        carrier_disconnected_action_cancel(self);
-        NM_DEVICE_GET_CLASS(self)->carrier_changed_notify(self, carrier);
-        carrier_changed(self, TRUE);
-
-        if (priv->carrier_wait_id) {
-            nm_device_remove_pending_action(self, NM_PENDING_ACTION_CARRIER_WAIT, FALSE);
-            _carrier_wait_check_queued_act_request(self);
-        }
-    } else {
-        if (priv->carrier_wait_id)
-            nm_device_add_pending_action(self, NM_PENDING_ACTION_CARRIER_WAIT, FALSE);
-        NM_DEVICE_GET_CLASS(self)->carrier_changed_notify(self, carrier);
-        if (state <= NM_DEVICE_STATE_DISCONNECTED && !priv->queued_act_request) {
-            _LOGD(LOGD_DEVICE, "carrier: link disconnected");
-            carrier_changed(self, FALSE);
-        } else {
-            gint64 now_ms, until_ms;
-
-            now_ms   = nm_utils_get_monotonic_timestamp_msec();
-            until_ms = NM_MAX(now_ms + _get_carrier_wait_ms(self), priv->carrier_wait_until_ms);
-            priv->carrier_defer_id =
-                g_timeout_add(until_ms - now_ms, carrier_disconnected_action_cb, self);
-            _LOGD(LOGD_DEVICE,
-                  "carrier: link disconnected (deferring action for %ld milliseconds) (id=%u)",
-                  (long) (until_ms - now_ms),
-                  priv->carrier_defer_id);
-        }
-    }
-}
-
-static void
-nm_device_set_carrier_from_platform(NMDevice *self)
-{
-    int ifindex;
-
-    if (nm_device_has_capability(self, NM_DEVICE_CAP_CARRIER_DETECT)) {
-        if (!nm_device_has_capability(self, NM_DEVICE_CAP_NONSTANDARD_CARRIER)
-            && (ifindex = nm_device_get_ip_ifindex(self)) > 0) {
-            nm_device_set_carrier(
-                self,
-                nm_platform_link_is_connected(nm_device_get_platform(self), ifindex));
-        }
-    } else {
-        NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-        /* Fake online link when carrier detection is not available. */
-        if (!priv->carrier) {
-            priv->carrier = TRUE;
-            _notify(self, PROP_CARRIER);
-        }
-    }
-}
-
-/*****************************************************************************/
-
-static void
-device_recheck_slave_status(NMDevice *self, const NMPlatformLink *plink)
-{
-    NMDevicePrivate *    priv = NM_DEVICE_GET_PRIVATE(self);
-    NMDevice *           master;
-    nm_auto_nmpobj const NMPObject *plink_master_keep_alive = NULL;
-    const NMPlatformLink *          plink_master;
-
-    g_return_if_fail(plink);
-
-    if (plink->master <= 0)
-        return;
-
-    master                  = nm_manager_get_device_by_ifindex(NM_MANAGER_GET, plink->master);
-    plink_master            = nm_platform_link_get(nm_device_get_platform(self), plink->master);
-    plink_master_keep_alive = nmp_object_ref(NMP_OBJECT_UP_CAST(plink_master));
-
-    if (master == NULL && plink_master && nm_streq0(plink_master->name, "ovs-system")
-        && plink_master->type == NM_LINK_TYPE_OPENVSWITCH) {
-        _LOGD(LOGD_DEVICE, "the device claimed by openvswitch");
-        return;
-    }
-
-    if (priv->master) {
-        if (plink->master > 0 && plink->master == nm_device_get_ifindex(priv->master)) {
-            /* call add-slave again. We expect @self already to be added to
-             * the master, but this also triggers a recheck-assume. */
-            nm_device_master_add_slave(priv->master, self, FALSE);
-            return;
-        }
-
-        nm_device_master_release_one_slave(priv->master,
-                                           self,
-                                           FALSE,
-                                           FALSE,
-                                           NM_DEVICE_STATE_REASON_CONNECTION_ASSUMED);
-    }
-
-    if (master && NM_DEVICE_GET_CLASS(master)->enslave_slave)
-        nm_device_master_add_slave(master, self, FALSE);
-    else if (master) {
-        _LOGI(LOGD_DEVICE,
-              "enslaved to non-master-type device %s; ignoring",
-              nm_device_get_iface(master));
-    } else {
-        _LOGW(LOGD_DEVICE,
-              "enslaved to unknown device %d (%s%s%s)",
-              plink->master,
-              NM_PRINT_FMT_QUOTED(plink_master, "\"", plink_master->name, "\"", "??"));
-    }
-}
-
-static void
-ndisc_set_router_config(NMNDisc *ndisc, NMDevice *self)
-{
-    NMDevicePrivate *            priv = NM_DEVICE_GET_PRIVATE(self);
-    gint32                       now;
-    GArray *                     addresses, *dns_servers, *dns_domains;
-    guint                        len, i;
-    const NMDedupMultiHeadEntry *head_entry;
-    NMDedupMultiIter             ipconf_iter;
-
-    if (nm_ndisc_get_node_type(ndisc) != NM_NDISC_NODE_TYPE_ROUTER)
-        return;
-
-    now = nm_utils_get_monotonic_timestamp_sec();
-
-    head_entry = nm_ip6_config_lookup_addresses(priv->ip_config_6);
-    addresses =
-        g_array_sized_new(FALSE, TRUE, sizeof(NMNDiscAddress), head_entry ? head_entry->len : 0);
-    nm_dedup_multi_iter_for_each (&ipconf_iter, head_entry) {
-        const NMPlatformIP6Address *addr = NMP_OBJECT_CAST_IP6_ADDRESS(ipconf_iter.current->obj);
-        NMNDiscAddress *            ndisc_addr;
-        guint32                     lifetime, preferred;
-        gint32                      base;
-
-        if (IN6_IS_ADDR_UNSPECIFIED(&addr->address) || IN6_IS_ADDR_LINKLOCAL(&addr->address))
-            continue;
-
-        if (addr->n_ifa_flags & IFA_F_TENTATIVE || addr->n_ifa_flags & IFA_F_DADFAILED)
-            continue;
-
-        if (addr->plen != 64)
-            continue;
-
-        /* resolve the timestamps relative to a new base.
-         *
-         * Note that for convenience, platform @addr might have timestamp and/or
-         * lifetime unset. We don't allow that flexibility for ndisc and require
-         * well defined timestamps. */
-        if (addr->timestamp) {
-            nm_assert(addr->timestamp < G_MAXINT32);
-            base = addr->timestamp;
-        } else
-            base = now;
-
-        lifetime = nm_utils_lifetime_get(addr->timestamp,
-                                         addr->lifetime,
-                                         addr->preferred,
-                                         base,
-                                         &preferred);
-        if (!lifetime)
-            continue;
-
-        g_array_set_size(addresses, addresses->len + 1);
-        ndisc_addr            = &g_array_index(addresses, NMNDiscAddress, addresses->len - 1);
-        ndisc_addr->address   = addr->address;
-        ndisc_addr->timestamp = base;
-        ndisc_addr->lifetime  = lifetime;
-        ndisc_addr->preferred = preferred;
-    }
-
-    len         = nm_ip6_config_get_num_nameservers(priv->ip_config_6);
-    dns_servers = g_array_sized_new(FALSE, TRUE, sizeof(NMNDiscDNSServer), len);
-    g_array_set_size(dns_servers, len);
-    for (i = 0; i < len; i++) {
-        const struct in6_addr *nameserver = nm_ip6_config_get_nameserver(priv->ip_config_6, i);
-        NMNDiscDNSServer *     ndisc_nameserver;
-
-        ndisc_nameserver            = &g_array_index(dns_servers, NMNDiscDNSServer, i);
-        ndisc_nameserver->address   = *nameserver;
-        ndisc_nameserver->timestamp = now;
-        ndisc_nameserver->lifetime  = NM_NDISC_ROUTER_LIFETIME;
-    }
-
-    len         = nm_ip6_config_get_num_searches(priv->ip_config_6);
-    dns_domains = g_array_sized_new(FALSE, TRUE, sizeof(NMNDiscDNSDomain), len);
-    g_array_set_size(dns_domains, len);
-    for (i = 0; i < len; i++) {
-        const char *      search = nm_ip6_config_get_search(priv->ip_config_6, i);
-        NMNDiscDNSDomain *ndisc_search;
-
-        ndisc_search            = &g_array_index(dns_domains, NMNDiscDNSDomain, i);
-        ndisc_search->domain    = (char *) search;
-        ndisc_search->timestamp = now;
-        ndisc_search->lifetime  = NM_NDISC_ROUTER_LIFETIME;
-    }
-
-    nm_ndisc_set_config(ndisc, addresses, dns_servers, dns_domains);
-    g_array_unref(addresses);
-    g_array_unref(dns_servers);
-    g_array_unref(dns_domains);
-}
-
-static void
-device_update_interface_flags(NMDevice *self, const NMPlatformLink *plink)
-{
-    NMDevicePrivate *      priv  = NM_DEVICE_GET_PRIVATE(self);
-    NMDeviceInterfaceFlags flags = NM_DEVICE_INTERFACE_FLAG_NONE;
-
-    if (plink && NM_FLAGS_HAS(plink->n_ifi_flags, IFF_UP))
-        flags |= NM_DEVICE_INTERFACE_FLAG_UP;
-    if (plink && NM_FLAGS_HAS(plink->n_ifi_flags, IFF_LOWER_UP))
-        flags |= NM_DEVICE_INTERFACE_FLAG_LOWER_UP;
-
-    if (NM_FLAGS_ALL(priv->capabilities,
-                     NM_DEVICE_CAP_CARRIER_DETECT | NM_DEVICE_CAP_NONSTANDARD_CARRIER)) {
-        if (priv->carrier)
-            flags |= NM_DEVICE_INTERFACE_FLAG_CARRIER;
-    } else {
-        if (plink && NM_FLAGS_HAS(plink->n_ifi_flags, IFF_LOWER_UP))
-            flags |= NM_DEVICE_INTERFACE_FLAG_CARRIER;
-    }
-
-    if (flags != priv->interface_flags) {
-        priv->interface_flags = flags;
-        _notify(self, PROP_INTERFACE_FLAGS);
-    }
-}
-
-static gboolean
-device_link_changed(NMDevice *self)
-{
-    NMDeviceClass *      klass                        = NM_DEVICE_GET_CLASS(self);
-    NMDevicePrivate *    priv                         = NM_DEVICE_GET_PRIVATE(self);
-    gboolean             ip_ifname_changed            = FALSE;
-    nm_auto_nmpobj const NMPObject *pllink_keep_alive = NULL;
-    const NMPlatformLink *          pllink;
-    const char *                    str;
-    int                             ifindex;
-    gboolean                        was_up;
-    gboolean                        update_unmanaged_specs = FALSE;
-    gboolean                        got_hw_addr            = FALSE, had_hw_addr;
-    gboolean                        seen_down              = priv->device_link_changed_down;
-
-    priv->device_link_changed_id   = 0;
-    priv->device_link_changed_down = FALSE;
-
-    ifindex = nm_device_get_ifindex(self);
-    if (ifindex <= 0)
-        return G_SOURCE_REMOVE;
-    pllink = nm_platform_link_get(nm_device_get_platform(self), ifindex);
-    if (!pllink)
-        return G_SOURCE_REMOVE;
-
-    pllink_keep_alive = nmp_object_ref(NMP_OBJECT_UP_CAST(pllink));
-
-    str = nm_platform_link_get_udi(nm_device_get_platform(self), pllink->ifindex);
-    if (!nm_streq0(str, priv->udi)) {
-        g_free(priv->udi);
-        priv->udi = g_strdup(str);
-        _notify(self, PROP_UDI);
-    }
-
-    str = nm_platform_link_get_path(nm_device_get_platform(self), pllink->ifindex);
-    if (!nm_streq0(str, priv->path)) {
-        g_free(priv->path);
-        priv->path = g_strdup(str);
-        _notify(self, PROP_PATH);
-    }
-
-    if (!nm_streq0(pllink->driver, priv->driver)) {
-        g_free(priv->driver);
-        priv->driver = g_strdup(pllink->driver);
-        _notify(self, PROP_DRIVER);
-    }
-
-    _set_mtu(self, pllink->mtu);
-
-    if (ifindex == nm_device_get_ip_ifindex(self))
-        _stats_update_counters_from_pllink(self, pllink);
-
-    had_hw_addr = (priv->hw_addr != NULL);
-    nm_device_update_hw_address(self);
-    got_hw_addr = (!had_hw_addr && priv->hw_addr);
-    nm_device_update_permanent_hw_address(self, FALSE);
-
-    if (pllink->name[0] && !nm_streq(priv->iface, pllink->name)) {
-        _LOGI(LOGD_DEVICE,
-              "interface index %d renamed iface from '%s' to '%s'",
-              priv->ifindex,
-              priv->iface,
-              pllink->name);
-        g_free(priv->iface_);
-        priv->iface_ = g_strdup(pllink->name);
-
-        /* If the device has no explicit ip_iface, then changing iface changes ip_iface too. */
-        ip_ifname_changed = !priv->ip_iface;
-
-        if (nm_device_get_unmanaged_flags(self, NM_UNMANAGED_PLATFORM_INIT))
-            nm_device_set_unmanaged_by_user_settings(self);
-        else
-            update_unmanaged_specs = TRUE;
-
-        _notify(self, PROP_IFACE);
-        if (ip_ifname_changed)
-            _notify(self, PROP_IP_IFACE);
-
-        /* Re-match available connections against the new interface name */
-        nm_device_recheck_available_connections(self);
-
-        /* Let any connections that use the new interface name have a chance
-         * to auto-activate on the device.
-         */
-        nm_device_emit_recheck_auto_activate(self);
-    }
-
-    if (priv->ndisc && pllink->inet6_token.id) {
-        if (nm_ndisc_set_iid(priv->ndisc, pllink->inet6_token))
-            _LOGD(LOGD_DEVICE, "IPv6 tokenized identifier present on device %s", priv->iface);
-    }
-
-    /* Update carrier from link event if applicable. */
-    if (nm_device_has_capability(self, NM_DEVICE_CAP_CARRIER_DETECT)
-        && !nm_device_has_capability(self, NM_DEVICE_CAP_NONSTANDARD_CARRIER))
-        nm_device_set_carrier(self, pllink->connected);
-
-    device_update_interface_flags(self, pllink);
-
-    klass->link_changed(self, pllink);
-
-    /* Update DHCP, etc, if needed */
-    if (ip_ifname_changed)
-        nm_device_update_dynamic_ip_setup(self);
-
-    was_up   = priv->up;
-    priv->up = NM_FLAGS_HAS(pllink->n_ifi_flags, IFF_UP);
-
-    if (pllink->initialized && nm_device_get_unmanaged_flags(self, NM_UNMANAGED_PLATFORM_INIT)) {
-        NMDeviceStateReason reason;
-
-        nm_device_set_unmanaged_by_user_udev(self);
-        nm_device_set_unmanaged_by_user_conf(self);
-
-        reason = NM_DEVICE_STATE_REASON_NOW_MANAGED;
-
-        /* If the device is a external-down candidated but no longer has external
-         * down set, we must clear the platform-unmanaged flag with reason
-         * "assumed". */
-        if (nm_device_get_unmanaged_mask(self, NM_UNMANAGED_EXTERNAL_DOWN)
-            && !nm_device_get_unmanaged_flags(self, NM_UNMANAGED_EXTERNAL_DOWN)) {
-            /* actually, user-udev overwrites external-down. So we only assume the device,
-             * when it is a external-down candidate, which is not managed via udev. */
-            if (!nm_device_get_unmanaged_mask(self, NM_UNMANAGED_USER_UDEV)) {
-                /* Ensure the assume check is queued before any queued state changes
-                 * from the transition to UNAVAILABLE.
-                 */
-                nm_device_queue_recheck_assume(self);
-                reason = NM_DEVICE_STATE_REASON_CONNECTION_ASSUMED;
-            }
-        }
-
-        nm_device_set_unmanaged_by_flags(self, NM_UNMANAGED_PLATFORM_INIT, FALSE, reason);
-    }
-
-    set_unmanaged_external_down(self, FALSE);
-
-    device_recheck_slave_status(self, pllink);
-
-    if (priv->up && (!was_up || seen_down)) {
-        /* the link was down and just came up. That happens for example, while changing MTU.
-         * We must restore IP configuration. */
-        if (NM_IN_SET(priv->ip_state_4, NM_DEVICE_IP_STATE_CONF, NM_DEVICE_IP_STATE_DONE)) {
-            if (!ip_config_merge_and_apply(self, AF_INET, TRUE))
-                _LOGW(LOGD_IP4, "failed applying IP4 config after link comes up again");
-        }
-
-        priv->linklocal6_dad_counter = 0;
-        if (NM_IN_SET(priv->ip_state_6, NM_DEVICE_IP_STATE_CONF, NM_DEVICE_IP_STATE_DONE)) {
-            if (!ip_config_merge_and_apply(self, AF_INET6, TRUE))
-                _LOGW(LOGD_IP6, "failed applying IP6 config after link comes up again");
-        }
-    }
-
-    if (update_unmanaged_specs)
-        nm_device_set_unmanaged_by_user_settings(self);
-
-    if (got_hw_addr && !priv->up && nm_device_get_state(self) == NM_DEVICE_STATE_UNAVAILABLE) {
-        /*
-         * If the device is UNAVAILABLE, any previous try to
-         * bring it up probably has failed because of the
-         * invalid hardware address; try again.
-         */
-        nm_device_bring_up(self, TRUE, NULL);
-        nm_device_queue_recheck_available(self,
-                                          NM_DEVICE_STATE_REASON_NONE,
-                                          NM_DEVICE_STATE_REASON_NONE);
-    }
-
-    return G_SOURCE_REMOVE;
-}
-
-static gboolean
-device_ip_link_changed(NMDevice *self)
-{
-    NMDevicePrivate *     priv = NM_DEVICE_GET_PRIVATE(self);
-    const NMPlatformLink *pllink;
-    const char *          ip_iface;
-
-    priv->device_ip_link_changed_id = 0;
-
-    if (priv->ip_ifindex <= 0)
-        return G_SOURCE_REMOVE;
-
-    nm_assert(priv->ip_iface);
-
-    pllink = nm_platform_link_get(nm_device_get_platform(self), priv->ip_ifindex);
-    if (!pllink)
-        return G_SOURCE_REMOVE;
-
-    if (priv->ifindex <= 0 && pllink->mtu)
-        _set_mtu(self, pllink->mtu);
-
-    _stats_update_counters_from_pllink(self, pllink);
-
-    ip_iface = pllink->name;
-
-    if (!ip_iface[0])
-        return FALSE;
-
-    if (!nm_streq(priv->ip_iface, ip_iface)) {
-        _LOGI(LOGD_DEVICE,
-              "ip-ifname: interface index %d renamed ip_iface (%d) from '%s' to '%s'",
-              priv->ifindex,
-              priv->ip_ifindex,
-              priv->ip_iface,
-              ip_iface);
-        g_free(priv->ip_iface_);
-        priv->ip_iface_ = g_strdup(ip_iface);
-        _notify(self, PROP_IP_IFACE);
-
-        nm_device_update_dynamic_ip_setup(self);
-    }
-
-    return G_SOURCE_REMOVE;
-}
-
-static void
-link_changed_cb(NMPlatform *    platform,
-                int             obj_type_i,
-                int             ifindex,
-                NMPlatformLink *info,
-                int             change_type_i,
-                NMDevice *      self)
-{
-    const NMPlatformSignalChangeType change_type = change_type_i;
-    NMDevicePrivate *                priv;
-
-    if (change_type != NM_PLATFORM_SIGNAL_CHANGED)
-        return;
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (ifindex == nm_device_get_ifindex(self)) {
-        if (!(info->n_ifi_flags & IFF_UP))
-            priv->device_link_changed_down = TRUE;
-        if (!priv->device_link_changed_id) {
-            priv->device_link_changed_id = g_idle_add((GSourceFunc) device_link_changed, self);
-            _LOGD(LOGD_DEVICE, "queued link change for ifindex %d", ifindex);
-        }
-    } else if (ifindex == nm_device_get_ip_ifindex(self)) {
-        if (!priv->device_ip_link_changed_id) {
-            priv->device_ip_link_changed_id =
-                g_idle_add((GSourceFunc) device_ip_link_changed, self);
-            _LOGD(LOGD_DEVICE, "queued link change for ip-ifindex %d", ifindex);
-        }
-    }
-}
-
-/*****************************************************************************/
-
-static void
-link_changed(NMDevice *self, const NMPlatformLink *pllink)
-{
-    /* stub implementation of virtual function to allow subclasses to chain up. */
-}
-
-static gboolean
-link_type_compatible(NMDevice *self, NMLinkType link_type, gboolean *out_compatible, GError **error)
-{
-    NMDeviceClass *klass;
-    NMLinkType     device_type;
-    guint          i = 0;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    klass = NM_DEVICE_GET_CLASS(self);
-
-    if (!klass->link_types) {
-        NM_SET_OUT(out_compatible, FALSE);
-        g_set_error_literal(error,
-                            NM_DEVICE_ERROR,
-                            NM_DEVICE_ERROR_FAILED,
-                            "Device does not support platform links");
-        return FALSE;
-    }
-
-    device_type = self->_priv->link_type;
-    if (device_type > NM_LINK_TYPE_UNKNOWN && device_type != link_type) {
-        g_set_error(error,
-                    NM_DEVICE_ERROR,
-                    NM_DEVICE_ERROR_FAILED,
-                    "Needed link type 0x%x does not match the platform link type 0x%X",
-                    device_type,
-                    link_type);
-        return FALSE;
-    }
-
-    for (i = 0; klass->link_types[i] > NM_LINK_TYPE_UNKNOWN; i++) {
-        if (klass->link_types[i] == link_type)
-            return TRUE;
-        if (klass->link_types[i] == NM_LINK_TYPE_ANY)
-            return TRUE;
-    }
-
-    NM_SET_OUT(out_compatible, FALSE);
-    g_set_error(error,
-                NM_DEVICE_ERROR,
-                NM_DEVICE_ERROR_FAILED,
-                "Device does not support platform link type 0x%X",
-                link_type);
-    return FALSE;
-}
-
-/**
- * nm_device_realize_start():
- * @self: the #NMDevice
- * @plink: an existing platform link or %NULL
- * @assume_state_guess_assume: set the guess_assume state.
- * @assume_state_connection_uuid: set the connection uuid to assume.
- * @set_nm_owned: for software device, if TRUE set nm-owned.
- * @unmanaged_user_explicit: the user-explicit unmanaged flag to apply
- *   on the device initially.
- * @out_compatible: %TRUE on return if @self is compatible with @plink
- * @error: location to store error, or %NULL
- *
- * Initializes and sets up the device using existing backing resources. Before
- * the device is ready for use nm_device_realize_finish() must be called.
- * @out_compatible will only be set if @plink is not %NULL, and
- *
- * Important: if nm_device_realize_start() returns %TRUE, the caller MUST
- * also call nm_device_realize_finish() to balance g_object_freeze_notify().
- *
- * Returns: %TRUE on success, %FALSE on error
- */
-gboolean
-nm_device_realize_start(NMDevice *            self,
-                        const NMPlatformLink *plink,
-                        gboolean              assume_state_guess_assume,
-                        const char *          assume_state_connection_uuid,
-                        gboolean              set_nm_owned,
-                        NMUnmanFlagOp         unmanaged_user_explicit,
-                        gboolean *            out_compatible,
-                        GError **             error)
-{
-    nm_auto_nmpobj const NMPObject *plink_keep_alive = NULL;
-
-    nm_assert(!plink || NMP_OBJECT_GET_TYPE(NMP_OBJECT_UP_CAST(plink)) == NMP_OBJECT_TYPE_LINK);
-
-    NM_SET_OUT(out_compatible, TRUE);
-
-    if (plink) {
-        if (!nm_streq0(nm_device_get_iface(self), plink->name)) {
-            NM_SET_OUT(out_compatible, FALSE);
-            g_set_error_literal(error,
-                                NM_DEVICE_ERROR,
-                                NM_DEVICE_ERROR_FAILED,
-                                "Device interface name does not match platform link");
-            return FALSE;
-        }
-
-        if (!link_type_compatible(self, plink->type, out_compatible, error))
-            return FALSE;
-
-        plink_keep_alive = nmp_object_ref(NMP_OBJECT_UP_CAST(plink));
-    }
-
-    realize_start_setup(self,
-                        plink,
-                        assume_state_guess_assume,
-                        assume_state_connection_uuid,
-                        set_nm_owned,
-                        unmanaged_user_explicit,
-                        FALSE);
-    return TRUE;
-}
-
-/**
- * nm_device_create_and_realize():
- * @self: the #NMDevice
- * @connection: the #NMConnection being activated
- * @parent: the parent #NMDevice if any
- * @error: location to store error, or %NULL
- *
- * Creates any backing resources needed to realize the device to proceed
- * with activating @connection.
- *
- * Returns: %TRUE on success, %FALSE on error
- */
-gboolean
-nm_device_create_and_realize(NMDevice *    self,
-                             NMConnection *connection,
-                             NMDevice *    parent,
-                             GError **     error)
-{
-    nm_auto_nmpobj const NMPObject *plink_keep_alive = NULL;
-    NMDevicePrivate *               priv             = NM_DEVICE_GET_PRIVATE(self);
-    const NMPlatformLink *          plink;
-    gboolean                        nm_owned;
-
-    /* Must be set before device is realized */
-    plink    = nm_platform_link_get_by_ifname(nm_device_get_platform(self), priv->iface);
-    nm_owned = !plink || !link_type_compatible(self, plink->type, NULL, NULL);
-    _LOGD(LOGD_DEVICE, "create (is %snm-owned)", nm_owned ? "" : "not ");
-
-    plink = NULL;
-    /* Create any resources the device needs */
-    if (NM_DEVICE_GET_CLASS(self)->create_and_realize) {
-        if (!NM_DEVICE_GET_CLASS(self)->create_and_realize(self, connection, parent, &plink, error))
-            return FALSE;
-        if (plink) {
-            nm_assert(NMP_OBJECT_GET_TYPE(NMP_OBJECT_UP_CAST(plink)) == NMP_OBJECT_TYPE_LINK);
-            plink_keep_alive = nmp_object_ref(NMP_OBJECT_UP_CAST(plink));
-        }
-    }
-
-    priv->nm_owned = nm_owned;
-
-    realize_start_setup(self,
-                        plink,
-                        FALSE, /* assume_state_guess_assume */
-                        NULL,  /* assume_state_connection_uuid */
-                        FALSE,
-                        NM_UNMAN_FLAG_OP_FORGET,
-                        TRUE);
-    nm_device_realize_finish(self, plink);
-
-    if (nm_device_get_managed(self, FALSE)) {
-        nm_device_state_changed(self,
-                                NM_DEVICE_STATE_UNAVAILABLE,
-                                NM_DEVICE_STATE_REASON_NOW_MANAGED);
-    }
-    return TRUE;
-}
-
-static gboolean
-can_update_from_platform_link(NMDevice *self, const NMPlatformLink *plink)
-{
-    return TRUE;
-}
-
-void
-nm_device_update_from_platform_link(NMDevice *self, const NMPlatformLink *plink)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    const char *     str;
-    gboolean         ifindex_changed;
-    guint32          mtu;
-
-    if (!NM_DEVICE_GET_CLASS(self)->can_update_from_platform_link(self, plink))
-        return;
-
-    g_return_if_fail(plink == NULL || link_type_compatible(self, plink->type, NULL, NULL));
-
-    str = plink ? nm_platform_link_get_udi(nm_device_get_platform(self), plink->ifindex) : NULL;
-    if (!nm_streq0(str, priv->udi)) {
-        g_free(priv->udi);
-        priv->udi = g_strdup(str);
-        _notify(self, PROP_UDI);
-    }
-
-    str = plink ? nm_platform_link_get_path(nm_device_get_platform(self), plink->ifindex) : NULL;
-    if (!nm_streq0(str, priv->path)) {
-        g_free(priv->path);
-        priv->path = g_strdup(str);
-        _notify(self, PROP_PATH);
-    }
-
-    if (plink && !nm_str_is_empty(plink->name) && nm_utils_strdup_reset(&priv->iface_, plink->name))
-        _notify(self, PROP_IFACE);
-
-    str = plink ? plink->driver : NULL;
-    if (!nm_streq0(str, priv->driver)) {
-        g_free(priv->driver);
-        priv->driver = g_strdup(str);
-        _notify(self, PROP_DRIVER);
-    }
-
-    if (plink) {
-        priv->up = NM_FLAGS_HAS(plink->n_ifi_flags, IFF_UP);
-        if (plink->ifindex == nm_device_get_ip_ifindex(self))
-            _stats_update_counters_from_pllink(self, plink);
-    } else {
-        priv->up = FALSE;
-    }
-
-    mtu = plink ? plink->mtu : 0;
-    _set_mtu(self, mtu);
-
-    ifindex_changed = _set_ifindex(self, plink ? plink->ifindex : 0, FALSE);
-
-    if (ifindex_changed)
-        NM_DEVICE_GET_CLASS(self)->link_changed(self, plink);
-
-    device_update_interface_flags(self, plink);
-}
-
-/*****************************************************************************/
-
-static void
-sriov_op_start(NMDevice *self, SriovOp *op)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    nm_assert(!priv->sriov.pending);
-
-    op->cancellable     = g_cancellable_new();
-    op->device          = g_object_ref(self);
-    priv->sriov.pending = op;
-
-    nm_platform_link_set_sriov_params_async(nm_device_get_platform(self),
-                                            priv->ifindex,
-                                            op->num_vfs,
-                                            op->autoprobe,
-                                            sriov_op_cb,
-                                            op,
-                                            op->cancellable);
-}
-
-static void
-sriov_op_cb(GError *error, gpointer user_data)
-{
-    SriovOp *       op             = user_data;
-    gs_unref_object NMDevice *self = op->device;
-    NMDevicePrivate *         priv = NM_DEVICE_GET_PRIVATE(self);
-
-    nm_assert(op == priv->sriov.pending);
-
-    g_clear_object(&op->cancellable);
-
-    if (op->callback)
-        op->callback(error, op->callback_data);
-
-    priv->sriov.pending = NULL;
-    nm_g_slice_free(op);
-
-    if (priv->sriov.next) {
-        sriov_op_start(self, g_steal_pointer(&priv->sriov.next));
-    }
-}
-
-static void
-sriov_op_queue_op(NMDevice *self, SriovOp *op)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->sriov.next) {
-        SriovOp *op_next = g_steal_pointer(&priv->sriov.next);
-
-        priv->sriov.next = op;
-
-        /* Cancel the next operation immediately */
-        if (op_next->callback) {
-            gs_free_error GError *error = NULL;
-
-            nm_utils_error_set_cancelled(&error, FALSE, NULL);
-            op_next->callback(error, op_next->callback_data);
-        }
-
-        nm_g_slice_free(op_next);
-        return;
-    }
-
-    if (priv->sriov.pending) {
-        priv->sriov.next = op;
-        g_cancellable_cancel(priv->sriov.pending->cancellable);
-        return;
-    }
-
-    if (op)
-        sriov_op_start(self, op);
-}
-
-static void
-sriov_op_queue(NMDevice *              self,
-               guint                   num_vfs,
-               NMTernary               autoprobe,
-               NMPlatformAsyncCallback callback,
-               gpointer                callback_data)
-{
-    SriovOp *op;
-
-    /* We usually never want to cancel an async write operation, unless it's superseded
-     * by a newer operation (that resets the state). That is, because we need to ensure
-     * that we never end up doing two concurrent writes (since we write on a background
-     * thread, that would be unordered/racy).
-     * Of course, since we queue requests only per-device, when devices get renamed we
-     * might end up writing the same sysctl concurrently still. But that's really
-     * unlikely, and don't rename after udev completes!
-     *
-     * The "next" operation is not yet even started. It can be replaced/canceled right away
-     * when a newer request comes.
-     * The "pending" operation is currently ongoing, and we may cancel it if
-     * we have a follow-up operation (queued in "next"). Unless we have a such
-     * a newer request, we cannot cancel it!
-     *
-     * FIXME(shutdown): However, during shutdown we don't have a follow-up write request to cancel
-     * this operation and we have to give it at least some time to complete. The solution is that
-     * we register a way to abort the last call during shutdown, and after NM_SHUTDOWN_TIMEOUT_MS
-     * grace period we pull the plug and cancel it. */
-
-    op  = g_slice_new(SriovOp);
-    *op = (SriovOp){
-        .num_vfs       = num_vfs,
-        .autoprobe     = autoprobe,
-        .callback      = callback,
-        .callback_data = callback_data,
-    };
-    sriov_op_queue_op(self, op);
-}
-
-static void
-device_init_static_sriov_num_vfs(NMDevice *self)
-{
-    NMDevicePrivate *priv  = NM_DEVICE_GET_PRIVATE(self);
-    gs_free char *   value = NULL;
-    int              num_vfs;
-
-    if (priv->ifindex > 0 && nm_device_has_capability(self, NM_DEVICE_CAP_SRIOV)) {
-        value   = nm_config_data_get_device_config(NM_CONFIG_GET_DATA,
-                                                 NM_CONFIG_KEYFILE_KEY_DEVICE_SRIOV_NUM_VFS,
-                                                 self,
-                                                 NULL);
-        num_vfs = _nm_utils_ascii_str_to_int64(value, 10, 0, G_MAXINT32, -1);
-        if (num_vfs >= 0)
-            sriov_op_queue(self, num_vfs, NM_TERNARY_DEFAULT, NULL, NULL);
-    }
-}
-
-static void
-config_changed(NMConfig *          config,
-               NMConfigData *      config_data,
-               NMConfigChangeFlags changes,
-               NMConfigData *      old_data,
-               NMDevice *          self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->state <= NM_DEVICE_STATE_DISCONNECTED || priv->state > NM_DEVICE_STATE_ACTIVATED) {
-        priv->ignore_carrier = nm_config_data_get_ignore_carrier(config_data, self);
-        if (NM_FLAGS_HAS(changes, NM_CONFIG_CHANGE_VALUES))
-            device_init_static_sriov_num_vfs(self);
-    }
-}
-
-static void
-realize_start_notify(NMDevice *self, const NMPlatformLink *pllink)
-{
-    /* the default implementation of realize_start_notify() just calls
-     * link_changed() -- which by default does nothing. */
-    NM_DEVICE_GET_CLASS(self)->link_changed(self, pllink);
-}
-
-/**
- * realize_start_setup():
- * @self: the #NMDevice
- * @plink: the #NMPlatformLink if backed by a kernel netdevice
- * @assume_state_guess_assume: set the guess_assume state.
- * @assume_state_connection_uuid: set the connection uuid to assume.
- * @set_nm_owned: if TRUE and device is a software-device, set nm-owned.
- *    TRUE.
- * @unmanaged_user_explicit: the user-explict unmanaged flag to set.
- * @force_platform_init: if TRUE the platform-init unmanaged flag is
- *    forcefully cleared.
- *
- * Update the device from backing resource properties (like hardware
- * addresses, carrier states, driver/firmware info, etc).  This function
- * should only change properties for this device, and should not perform
- * any tasks that affect other interfaces (like master/slave or parent/child
- * stuff).
- */
-static void
-realize_start_setup(NMDevice *            self,
-                    const NMPlatformLink *plink,
-                    gboolean              assume_state_guess_assume,
-                    const char *          assume_state_connection_uuid,
-                    gboolean              set_nm_owned,
-                    NMUnmanFlagOp         unmanaged_user_explicit,
-                    gboolean              force_platform_init)
-{
-    NMDevicePrivate *    priv;
-    NMDeviceClass *      klass;
-    NMPlatform *         platform;
-    static guint32       id           = 0;
-    NMDeviceCapabilities capabilities = 0;
-    NMConfig *           config;
-    guint                real_rate;
-    gboolean             unmanaged;
-
-    /* plink is a NMPlatformLink type, however, we require it to come from the platform
-     * cache (where else would it come from?). */
-    nm_assert(!plink || NMP_OBJECT_GET_TYPE(NMP_OBJECT_UP_CAST(plink)) == NMP_OBJECT_TYPE_LINK);
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    /* The device should not be realized */
-    g_return_if_fail(!priv->real);
-    g_return_if_fail(nm_device_get_unmanaged_flags(self, NM_UNMANAGED_PLATFORM_INIT));
-    g_return_if_fail(priv->ip_ifindex <= 0);
-    g_return_if_fail(priv->ip_iface == NULL);
-    g_return_if_fail(!priv->queued_ip_config_id_4);
-    g_return_if_fail(!priv->queued_ip_config_id_6);
-
-    _LOGD(LOGD_DEVICE,
-          "start setup of %s, kernel ifindex %d",
-          G_OBJECT_TYPE_NAME(self),
-          plink ? plink->ifindex : 0);
-
-    klass    = NM_DEVICE_GET_CLASS(self);
-    platform = nm_device_get_platform(self);
-
-    /* Balanced by a thaw in nm_device_realize_finish() */
-    g_object_freeze_notify(G_OBJECT(self));
-
-    priv->mtu_source      = NM_DEVICE_MTU_SOURCE_NONE;
-    priv->mtu_initial     = 0;
-    priv->ip6_mtu_initial = 0;
-    priv->ip6_mtu         = 0;
-    _set_mtu(self, 0);
-
-    _assume_state_set(self, assume_state_guess_assume, assume_state_connection_uuid);
-
-    nm_device_sys_iface_state_set(self, NM_DEVICE_SYS_IFACE_STATE_EXTERNAL);
-
-    if (plink)
-        nm_device_update_from_platform_link(self, plink);
-
-    if (priv->ifindex > 0) {
-        priv->physical_port_id = nm_platform_link_get_physical_port_id(platform, priv->ifindex);
-        _notify(self, PROP_PHYSICAL_PORT_ID);
-
-        priv->dev_id = nm_platform_link_get_dev_id(platform, priv->ifindex);
-
-        if (nm_platform_link_is_software(platform, priv->ifindex))
-            capabilities |= NM_DEVICE_CAP_IS_SOFTWARE;
-
-        _set_mtu(self, nm_platform_link_get_mtu(platform, priv->ifindex));
-
-        nm_platform_link_get_driver_info(platform,
-                                         priv->ifindex,
-                                         NULL,
-                                         &priv->driver_version,
-                                         &priv->firmware_version);
-        if (priv->driver_version)
-            _notify(self, PROP_DRIVER_VERSION);
-        if (priv->firmware_version)
-            _notify(self, PROP_FIRMWARE_VERSION);
-
-        if (nm_platform_kernel_support_get(NM_PLATFORM_KERNEL_SUPPORT_TYPE_USER_IPV6LL))
-            priv->ipv6ll_handle = nm_platform_link_get_user_ipv6ll_enabled(platform, priv->ifindex);
-
-        if (nm_platform_link_supports_sriov(platform, priv->ifindex))
-            capabilities |= NM_DEVICE_CAP_SRIOV;
-    }
-
-    if (klass->get_generic_capabilities)
-        capabilities |= klass->get_generic_capabilities(self);
-
-    _add_capabilities(self, capabilities);
-
-    if (!priv->nm_owned && set_nm_owned && nm_device_is_software(self)) {
-        priv->nm_owned = TRUE;
-        _LOGD(LOGD_DEVICE, "set nm-owned from state file");
-    }
-
-    if (!priv->udi) {
-        /* Use a placeholder UDI until we get a real one */
-        priv->udi = g_strdup_printf("/virtual/device/placeholder/%d", id++);
-        _notify(self, PROP_UDI);
-    }
-
-    nm_device_update_hw_address(self);
-    nm_device_update_initial_hw_address(self);
-    nm_device_update_permanent_hw_address(self, FALSE);
-
-    /* Note: initial hardware address must be read before calling get_ignore_carrier() */
-    config               = nm_config_get();
-    priv->ignore_carrier = nm_config_data_get_ignore_carrier(nm_config_get_data(config), self);
-    if (!priv->config_changed_id) {
-        priv->config_changed_id = g_signal_connect(config,
-                                                   NM_CONFIG_SIGNAL_CONFIG_CHANGED,
-                                                   G_CALLBACK(config_changed),
-                                                   self);
-    }
-
-    nm_device_set_carrier_from_platform(self);
-
-    nm_assert(!priv->stats.timeout_id);
-    real_rate = _stats_refresh_rate_real(priv->stats.refresh_rate_ms);
-    if (real_rate)
-        priv->stats.timeout_id = g_timeout_add(real_rate, _stats_timeout_cb, self);
-
-    klass->realize_start_notify(self, plink);
-
-    nm_assert(!nm_device_get_unmanaged_mask(self, NM_UNMANAGED_USER_EXPLICIT));
-    nm_device_set_unmanaged_flags(self, NM_UNMANAGED_USER_EXPLICIT, unmanaged_user_explicit);
-
-    /* Do not manage externally created software devices until they are IFF_UP
-     * or have IP addressing */
-    nm_device_set_unmanaged_flags(self,
-                                  NM_UNMANAGED_EXTERNAL_DOWN,
-                                  is_unmanaged_external_down(self, TRUE));
-
-    /* Unmanaged the loopback device with an explicit NM_UNMANAGED_BY_TYPE flag.
-     * Later we might want to manage 'lo' too. Currently, that doesn't work because
-     * NetworkManager might down the interface or remove the 127.0.0.1 address. */
-    nm_device_set_unmanaged_flags(self, NM_UNMANAGED_BY_TYPE, is_loopback(self));
-
-    nm_device_set_unmanaged_by_user_udev(self);
-    nm_device_set_unmanaged_by_user_conf(self);
-
-    unmanaged = plink && !plink->initialized && !force_platform_init;
-
-    nm_device_set_unmanaged_flags(self, NM_UNMANAGED_PLATFORM_INIT, unmanaged);
-}
-
-/**
- * nm_device_realize_finish():
- * @self: the #NMDevice
- * @plink: the #NMPlatformLink if backed by a kernel netdevice
- *
- * Update the device's master/slave or parent/child relationships from
- * backing resource properties.  After this function finishes, the device
- * is ready for network connectivity.
- */
-void
-nm_device_realize_finish(NMDevice *self, const NMPlatformLink *plink)
-{
-    NMDevicePrivate *priv;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-    g_return_if_fail(!plink || link_type_compatible(self, plink->type, NULL, NULL));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    g_return_if_fail(!priv->real);
-
-    if (plink)
-        device_recheck_slave_status(self, plink);
-
-    priv->update_ip_config_completed_v4 = FALSE;
-    priv->update_ip_config_completed_v6 = FALSE;
-
-    priv->real = TRUE;
-    _notify(self, PROP_REAL);
-
-    nm_device_recheck_available_connections(self);
-
-    /* Balanced by a freeze in realize_start_setup(). */
-    g_object_thaw_notify(G_OBJECT(self));
-}
-
-static void
-unrealize_notify(NMDevice *self)
-{
-    /* Stub implementation for unrealize_notify(). It does nothing,
-     * but allows derived classes to uniformly invoke the parent
-     * implementation. */
-}
-
-static gboolean
-available_connections_check_delete_unrealized_on_idle(gpointer user_data)
-{
-    NMDevice *       self = user_data;
-    NMDevicePrivate *priv;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), G_SOURCE_REMOVE);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    priv->check_delete_unrealized_id = 0;
-
-    if (g_hash_table_size(priv->available_connections) == 0 && !nm_device_is_real(self))
-        g_signal_emit(self, signals[REMOVED], 0);
-
-    return G_SOURCE_REMOVE;
-}
-
-static void
-available_connections_check_delete_unrealized(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    /* always rescheadule the remove signal. */
-    nm_clear_g_source(&priv->check_delete_unrealized_id);
-
-    if (g_hash_table_size(priv->available_connections) == 0 && !nm_device_is_real(self))
-        priv->check_delete_unrealized_id =
-            g_idle_add(available_connections_check_delete_unrealized_on_idle, self);
-}
-
-/**
- * nm_device_unrealize():
- * @self: the #NMDevice
- * @remove_resources: if %TRUE, remove backing resources
- * @error: location to store error, or %NULL
- *
- * Clears any properties that depend on backing resources (kernel devices,
- * etc) and removes those resources if @remove_resources is %TRUE.
- *
- * Returns: %TRUE on success, %FALSE on error
- */
-gboolean
-nm_device_unrealize(NMDevice *self, gboolean remove_resources, GError **error)
-{
-    NMDevicePrivate *priv;
-    int              ifindex;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    if (!nm_device_is_software(self) || !nm_device_is_real(self)) {
-        g_set_error_literal(error,
-                            NM_DEVICE_ERROR,
-                            NM_DEVICE_ERROR_NOT_SOFTWARE,
-                            "This device is not a software device or is not realized");
-        return FALSE;
-    }
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    g_return_val_if_fail(priv->iface != NULL, FALSE);
-    g_return_val_if_fail(priv->real, FALSE);
-
-    ifindex = nm_device_get_ifindex(self);
-
-    _LOGD(LOGD_DEVICE, "unrealize (ifindex %d)", ifindex > 0 ? ifindex : 0);
-
-    nm_device_assume_state_reset(self);
-
-    if (remove_resources) {
-        if (NM_DEVICE_GET_CLASS(self)->unrealize) {
-            if (!NM_DEVICE_GET_CLASS(self)->unrealize(self, error))
-                return FALSE;
-        } else if (ifindex > 0) {
-            nm_platform_link_delete(nm_device_get_platform(self), ifindex);
-        }
-    }
-
-    nm_clear_g_source(&priv->queued_ip_config_id_4);
-    nm_clear_g_source(&priv->queued_ip_config_id_6);
-
-    g_object_freeze_notify(G_OBJECT(self));
-    NM_DEVICE_GET_CLASS(self)->unrealize_notify(self);
-
-    _parent_set_ifindex(self, 0, FALSE);
-
-    _set_ifindex(self, 0, FALSE);
-    _set_ifindex(self, 0, TRUE);
-    if (nm_clear_g_free(&priv->ip_iface_))
-        _notify(self, PROP_IP_IFACE);
-
-    _set_mtu(self, 0);
-
-    if (priv->driver_version) {
-        nm_clear_g_free(&priv->driver_version);
-        _notify(self, PROP_DRIVER_VERSION);
-    }
-    if (priv->firmware_version) {
-        nm_clear_g_free(&priv->firmware_version);
-        _notify(self, PROP_FIRMWARE_VERSION);
-    }
-    if (priv->udi) {
-        nm_clear_g_free(&priv->udi);
-        _notify(self, PROP_UDI);
-    }
-    if (priv->path) {
-        nm_clear_g_free(&priv->path);
-        _notify(self, PROP_PATH);
-    }
-    if (priv->physical_port_id) {
-        nm_clear_g_free(&priv->physical_port_id);
-        _notify(self, PROP_PHYSICAL_PORT_ID);
-    }
-
-    nm_clear_g_source(&priv->stats.timeout_id);
-    _stats_update_counters(self, 0, 0);
-
-    priv->hw_addr_len_ = 0;
-    if (nm_clear_g_free(&priv->hw_addr))
-        _notify(self, PROP_HW_ADDRESS);
-    priv->hw_addr_type = HW_ADDR_TYPE_UNSET;
-    if (nm_clear_g_free(&priv->hw_addr_perm))
-        _notify(self, PROP_PERM_HW_ADDRESS);
-    nm_clear_g_free(&priv->hw_addr_initial);
-
-    priv->capabilities = NM_DEVICE_CAP_NM_SUPPORTED;
-    if (NM_DEVICE_GET_CLASS(self)->get_generic_capabilities)
-        priv->capabilities |= NM_DEVICE_GET_CLASS(self)->get_generic_capabilities(self);
-    _notify(self, PROP_CAPABILITIES);
-
-    nm_clear_g_signal_handler(nm_config_get(), &priv->config_changed_id);
-
-    priv->real = FALSE;
-    _notify(self, PROP_REAL);
-
-    g_object_thaw_notify(G_OBJECT(self));
-
-    nm_device_set_unmanaged_flags(self, NM_UNMANAGED_PLATFORM_INIT, TRUE);
-
-    nm_device_set_unmanaged_flags(self,
-                                  NM_UNMANAGED_PARENT | NM_UNMANAGED_BY_TYPE
-                                      | NM_UNMANAGED_USER_UDEV | NM_UNMANAGED_USER_EXPLICIT
-                                      | NM_UNMANAGED_EXTERNAL_DOWN | NM_UNMANAGED_IS_SLAVE,
-                                  NM_UNMAN_FLAG_OP_FORGET);
-
-    nm_device_state_changed(self,
-                            NM_DEVICE_STATE_UNMANAGED,
-                            remove_resources ? NM_DEVICE_STATE_REASON_USER_REQUESTED
-                                             : NM_DEVICE_STATE_REASON_NOW_UNMANAGED);
-
-    /* Garbage-collect unneeded unrealized devices. */
-    nm_device_recheck_available_connections(self);
-
-    return TRUE;
-}
-
-void
-nm_device_notify_availability_maybe_changed(NMDevice *self)
-{
-    NMDevicePrivate *priv;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->state != NM_DEVICE_STATE_DISCONNECTED)
-        return;
-
-    /* A device could have stayed disconnected because it would
-     * want to register with a network server that now become
-     * available. */
-    nm_device_recheck_available_connections(self);
-    if (g_hash_table_size(priv->available_connections) > 0)
-        nm_device_emit_recheck_auto_activate(self);
-}
-
-/**
- * nm_device_owns_iface():
- * @self: the #NMDevice
- * @iface: an interface name
- *
- * Called by the manager to ask if the device or any of its components owns
- * @iface.  For example, a WWAN implementation would return %TRUE for an
- * ethernet interface name that was owned by the WWAN device's modem component,
- * because that ethernet interface is controlled by the WWAN device and cannot
- * be used independently of the WWAN device.
- *
- * Returns: %TRUE if @self or its components own the interface name,
- * %FALSE if not
- */
-gboolean
-nm_device_owns_iface(NMDevice *self, const char *iface)
-{
-    if (NM_DEVICE_GET_CLASS(self)->owns_iface)
-        return NM_DEVICE_GET_CLASS(self)->owns_iface(self, iface);
-    return FALSE;
-}
-
-NMConnection *
-nm_device_new_default_connection(NMDevice *self)
-{
-    NMConnection *connection;
-    GError *      error = NULL;
-
-    if (!NM_DEVICE_GET_CLASS(self)->new_default_connection)
-        return NULL;
-
-    connection = NM_DEVICE_GET_CLASS(self)->new_default_connection(self);
-    if (!connection)
-        return NULL;
-
-    if (!nm_connection_normalize(connection, NULL, NULL, &error)) {
-        _LOGD(LOGD_DEVICE, "device generated an invalid default connection: %s", error->message);
-        g_error_free(error);
-        g_return_val_if_reached(NULL);
-    }
-
-    return connection;
-}
-
-static void
-slave_state_changed(NMDevice *          slave,
-                    NMDeviceState       slave_new_state,
-                    NMDeviceState       slave_old_state,
-                    NMDeviceStateReason reason,
-                    NMDevice *          self)
-{
-    NMDevicePrivate *priv    = NM_DEVICE_GET_PRIVATE(self);
-    gboolean         release = FALSE;
-    gboolean         configure;
-
-    _LOGD(LOGD_DEVICE,
-          "slave %s state change %d (%s) -> %d (%s)",
-          nm_device_get_iface(slave),
-          slave_old_state,
-          nm_device_state_to_str(slave_old_state),
-          slave_new_state,
-          nm_device_state_to_str(slave_new_state));
-
-    /* Don't try to enslave slaves until the master is ready */
-    if (priv->state < NM_DEVICE_STATE_CONFIG)
-        return;
-
-    if (slave_new_state == NM_DEVICE_STATE_IP_CONFIG)
-        nm_device_master_enslave_slave(self, slave, nm_device_get_applied_connection(slave));
-    else if (slave_new_state > NM_DEVICE_STATE_ACTIVATED)
-        release = TRUE;
-    else if (slave_new_state <= NM_DEVICE_STATE_DISCONNECTED
-             && slave_old_state > NM_DEVICE_STATE_DISCONNECTED) {
-        /* Catch failures due to unavailable or unmanaged */
-        release = TRUE;
-    }
-
-    if (release) {
-        configure = priv->sys_iface_state == NM_DEVICE_SYS_IFACE_STATE_MANAGED
-                    && nm_device_sys_iface_state_get(slave) != NM_DEVICE_SYS_IFACE_STATE_EXTERNAL;
-
-        nm_device_master_release_one_slave(self, slave, configure, FALSE, reason);
-        /* Bridge/bond/team interfaces are left up until manually deactivated */
-        if (c_list_is_empty(&priv->slaves) && priv->state == NM_DEVICE_STATE_ACTIVATED)
-            _LOGD(LOGD_DEVICE, "last slave removed; remaining activated");
-    }
-}
-
-/**
- * nm_device_master_add_slave:
- * @self: the master device
- * @slave: the slave device to enslave
- * @configure: pass %TRUE if the slave should be configured by the master, or
- * %FALSE if it is already configured outside NetworkManager
- *
- * If @self is capable of enslaving other devices (ie it's a bridge, bond, team,
- * etc) then this function adds @slave to the slave list for later enslavement.
- *
- * Returns: %TRUE if the slave was enslaved. %FALSE means, the slave was already
- *   enslaved and nothing was done.
- */
-static gboolean
-nm_device_master_add_slave(NMDevice *self, NMDevice *slave, gboolean configure)
-{
-    NMDevicePrivate *priv;
-    NMDevicePrivate *slave_priv;
-    SlaveInfo *      info;
-    gboolean         changed = FALSE;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-    g_return_val_if_fail(NM_IS_DEVICE(slave), FALSE);
-    g_return_val_if_fail(NM_DEVICE_GET_CLASS(self)->enslave_slave != NULL, FALSE);
-
-    priv       = NM_DEVICE_GET_PRIVATE(self);
-    slave_priv = NM_DEVICE_GET_PRIVATE(slave);
-
-    info = find_slave_info(self, slave);
-
-    _LOGT(LOGD_CORE,
-          "master: add one slave %p/%s%s",
-          slave,
-          nm_device_get_iface(slave),
-          info ? " (already registered)" : "");
-
-    if (configure)
-        g_return_val_if_fail(nm_device_get_state(slave) >= NM_DEVICE_STATE_DISCONNECTED, FALSE);
-
-    if (!info) {
-        g_return_val_if_fail(!slave_priv->master, FALSE);
-        g_return_val_if_fail(!slave_priv->is_enslaved, FALSE);
-
-        info            = g_slice_new0(SlaveInfo);
-        info->slave     = g_object_ref(slave);
-        info->configure = configure;
-        info->watch_id =
-            g_signal_connect(slave, NM_DEVICE_STATE_CHANGED, G_CALLBACK(slave_state_changed), self);
-        c_list_link_tail(&priv->slaves, &info->lst_slave);
-        slave_priv->master = g_object_ref(self);
-
-        _active_connection_set_state_flags(self, NM_ACTIVATION_STATE_FLAG_MASTER_HAS_SLAVES);
-
-        /* no need to emit
-         *
-         *   _notify (slave, PROP_MASTER);
-         *
-         * because slave_priv->is_enslaved is not true, thus the value
-         * didn't change yet. */
-
-        g_warn_if_fail(!NM_FLAGS_HAS(slave_priv->unmanaged_mask, NM_UNMANAGED_IS_SLAVE));
-        nm_device_set_unmanaged_by_flags(slave,
-                                         NM_UNMANAGED_IS_SLAVE,
-                                         FALSE,
-                                         NM_DEVICE_STATE_REASON_CONNECTION_ASSUMED);
-        changed = TRUE;
-    } else
-        g_return_val_if_fail(slave_priv->master == self, FALSE);
-
-    nm_device_queue_recheck_assume(self);
-    nm_device_queue_recheck_assume(slave);
-
-    return changed;
-}
-
-/**
- * nm_device_master_check_slave_physical_port:
- * @self: the master device
- * @slave: a slave device
- * @log_domain: domain to log a warning in
- *
- * Checks if @self already has a slave with the same #NMDevice:physical-port-id
- * as @slave, and logs a warning if so.
- */
-void
-nm_device_master_check_slave_physical_port(NMDevice *self, NMDevice *slave, NMLogDomain log_domain)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    const char *     slave_physical_port_id, *existing_physical_port_id;
-    SlaveInfo *      info;
-    CList *          iter;
-
-    slave_physical_port_id = nm_device_get_physical_port_id(slave);
-    if (!slave_physical_port_id)
-        return;
-
-    c_list_for_each (iter, &priv->slaves) {
-        info = c_list_entry(iter, SlaveInfo, lst_slave);
-        if (info->slave == slave)
-            continue;
-
-        existing_physical_port_id = nm_device_get_physical_port_id(info->slave);
-        if (nm_streq0(slave_physical_port_id, existing_physical_port_id)) {
-            _LOGW(log_domain,
-                  "slave %s shares a physical port with existing slave %s",
-                  nm_device_get_ip_iface(slave),
-                  nm_device_get_ip_iface(info->slave));
-            /* Since this function will get called for every slave, we only have
-             * to warn about the first match we find; if there are other matches
-             * later in the list, we will have already warned about them matching
-             * @existing earlier.
-             */
-            return;
-        }
-    }
-}
-
-/* release all slaves */
-static void
-nm_device_master_release_slaves(NMDevice *self)
-{
-    NMDevicePrivate *   priv = NM_DEVICE_GET_PRIVATE(self);
-    NMDeviceStateReason reason;
-    CList *             iter, *safe;
-
-    /* Don't release the slaves if this connection doesn't belong to NM. */
-    if (nm_device_sys_iface_state_is_external(self))
-        return;
-
-    reason = priv->state_reason;
-    if (priv->state == NM_DEVICE_STATE_FAILED)
-        reason = NM_DEVICE_STATE_REASON_DEPENDENCY_FAILED;
-
-    c_list_for_each_safe (iter, safe, &priv->slaves) {
-        SlaveInfo *info = c_list_entry(iter, SlaveInfo, lst_slave);
-
-        nm_device_master_release_one_slave(self, info->slave, TRUE, FALSE, reason);
-    }
-}
-
-/**
- * nm_device_is_master:
- * @self: the device
- *
- * Returns: %TRUE if the device can have slaves
- */
-gboolean
-nm_device_is_master(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    return NM_DEVICE_GET_CLASS(self)->is_master;
-}
-
-/**
- * nm_device_get_master:
- * @self: the device
- *
- * If @self has been enslaved by another device, this returns that
- * device. Otherwise, it returns %NULL. (In particular, note that if
- * @self is in the process of activating as a slave, but has not yet
- * been enslaved by its master, this will return %NULL.)
- *
- * Returns: (transfer none): @self's master, or %NULL
- */
-NMDevice *
-nm_device_get_master(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->is_enslaved) {
-        g_return_val_if_fail(priv->master, NULL);
-        return priv->master;
-    }
-    return NULL;
-}
-
-static gboolean
-get_ip_config_may_fail(NMDevice *self, int addr_family)
-{
-    NMConnection *     connection;
-    NMSettingIPConfig *s_ip;
-
-    connection = nm_device_get_applied_connection(self);
-
-    s_ip = nm_connection_get_setting_ip_config(connection, addr_family);
-
-    return !s_ip || nm_setting_ip_config_get_may_fail(s_ip);
-}
-
-/*
- * check_ip_state
- *
- * When @full_state_update is TRUE, transition the device from IP_CONFIG to the
- * next state according to the outcome of IPv4 and IPv6 configuration. @may_fail
- * indicates that we are called just after the initial configuration and thus
- * IPv4/IPv6 are allowed to fail if the ipvx.may-fail properties say so, because
- * the IP methods couldn't even be started.
- * If @full_state_update is FALSE, just check if the connection should be failed
- * due to the state of both ip families and the ipvx.may-fail settings.
- */
-static void
-check_ip_state(NMDevice *self, gboolean may_fail, gboolean full_state_update)
-{
-    NMDevicePrivate *  priv         = NM_DEVICE_GET_PRIVATE(self);
-    gboolean           ip4_disabled = FALSE, ip6_disabled = FALSE;
-    NMSettingIPConfig *s_ip4, *s_ip6;
-    NMDeviceState      state;
-
-    if (full_state_update && nm_device_get_state(self) != NM_DEVICE_STATE_IP_CONFIG)
-        return;
-
-    /* Don't progress into IP_CHECK or SECONDARIES if we're waiting for the
-     * master to enslave us. */
-    if (nm_active_connection_get_master(NM_ACTIVE_CONNECTION(priv->act_request.obj))
-        && !priv->is_enslaved)
-        return;
-
-    s_ip4 = nm_device_get_applied_setting(self, NM_TYPE_SETTING_IP4_CONFIG);
-    if (s_ip4
-        && nm_streq0(nm_setting_ip_config_get_method(s_ip4), NM_SETTING_IP4_CONFIG_METHOD_DISABLED))
-        ip4_disabled = TRUE;
-
-    s_ip6 = nm_device_get_applied_setting(self, NM_TYPE_SETTING_IP6_CONFIG);
-    if (s_ip6
-        && NM_IN_STRSET(nm_setting_ip_config_get_method(s_ip6),
-                        NM_SETTING_IP6_CONFIG_METHOD_IGNORE,
-                        NM_SETTING_IP6_CONFIG_METHOD_DISABLED))
-        ip6_disabled = TRUE;
-
-    if (priv->ip_state_4 == NM_DEVICE_IP_STATE_DONE
-        && priv->ip_state_6 == NM_DEVICE_IP_STATE_DONE) {
-        /* Both method completed (or disabled), proceed with activation */
-        nm_device_state_changed(self, NM_DEVICE_STATE_IP_CHECK, NM_DEVICE_STATE_REASON_NONE);
-        return;
-    }
-
-    if ((priv->ip_state_4 == NM_DEVICE_IP_STATE_FAIL
-         || (ip4_disabled && priv->ip_state_4 == NM_DEVICE_IP_STATE_DONE))
-        && (priv->ip_state_6 == NM_DEVICE_IP_STATE_FAIL
-            || (ip6_disabled && priv->ip_state_6 == NM_DEVICE_IP_STATE_DONE))) {
-        /* Either both methods failed, or only one failed and the other is
-         * disabled */
-        if (nm_device_sys_iface_state_is_external_or_assume(self)) {
-            /* We have assumed configuration, but couldn't redo it. No problem,
-             * move to check state. */
-            _set_ip_state(self, AF_INET, NM_DEVICE_IP_STATE_DONE);
-            _set_ip_state(self, AF_INET6, NM_DEVICE_IP_STATE_DONE);
-            state = NM_DEVICE_STATE_IP_CHECK;
-        } else if (may_fail && get_ip_config_may_fail(self, AF_INET)
-                   && get_ip_config_may_fail(self, AF_INET6)) {
-            /* Couldn't start either IPv6 and IPv4 autoconfiguration,
-             * but both are allowed to fail. */
-            state = NM_DEVICE_STATE_SECONDARIES;
-        } else {
-            /* Autoconfiguration attempted without success. */
-            state = NM_DEVICE_STATE_FAILED;
-        }
-
-        if (full_state_update || state == NM_DEVICE_STATE_FAILED) {
-            nm_device_state_changed(self, state, NM_DEVICE_STATE_REASON_IP_CONFIG_UNAVAILABLE);
-        }
-        return;
-    }
-
-    /* If a method is still pending but required, wait */
-    if (priv->ip_state_4 != NM_DEVICE_IP_STATE_DONE && !get_ip_config_may_fail(self, AF_INET))
-        return;
-    if (priv->ip_state_6 != NM_DEVICE_IP_STATE_DONE && !get_ip_config_may_fail(self, AF_INET6))
-        return;
-
-    /* If at least a method has completed, proceed with activation */
-    if ((priv->ip_state_4 == NM_DEVICE_IP_STATE_DONE && !ip4_disabled)
-        || (priv->ip_state_6 == NM_DEVICE_IP_STATE_DONE && !ip6_disabled)) {
-        if (full_state_update)
-            nm_device_state_changed(self, NM_DEVICE_STATE_IP_CHECK, NM_DEVICE_STATE_REASON_NONE);
-        return;
-    }
-}
-
-/**
- * nm_device_slave_notify_enslave:
- * @self: the slave device
- * @success: whether the enslaving operation succeeded
- *
- * Notifies a slave that either it has been enslaved, or else its master tried
- * to enslave it and failed.
- */
-static void
-nm_device_slave_notify_enslave(NMDevice *self, gboolean success)
-{
-    NMDevicePrivate *priv       = NM_DEVICE_GET_PRIVATE(self);
-    NMConnection *   connection = nm_device_get_applied_connection(self);
-    gboolean         activating = (priv->state == NM_DEVICE_STATE_IP_CONFIG);
-
-    g_return_if_fail(priv->master);
-
-    if (!priv->is_enslaved) {
-        if (success) {
-            if (activating) {
-                _LOGI(LOGD_DEVICE,
-                      "Activation: connection '%s' enslaved, continuing activation",
-                      nm_connection_get_id(connection));
-            } else
-                _LOGI(LOGD_DEVICE, "enslaved to %s", nm_device_get_iface(priv->master));
-
-            priv->is_enslaved = TRUE;
-
-            _notify(self, PROP_MASTER);
-            _notify(priv->master, PROP_SLAVES);
-        } else if (activating) {
-            _LOGW(LOGD_DEVICE,
-                  "Activation: connection '%s' could not be enslaved",
-                  nm_connection_get_id(connection));
-        }
-    }
-
-    if (activating) {
-        if (success)
-            check_ip_state(self, FALSE, TRUE);
-        else
-            nm_device_queue_state(self, NM_DEVICE_STATE_FAILED, NM_DEVICE_STATE_REASON_UNKNOWN);
-    } else
-        nm_device_queue_recheck_assume(self);
-}
-
-/**
- * nm_device_slave_notify_release:
- * @self: the slave device
- * @reason: the reason associated with the state change
- *
- * Notifies a slave that it has been released, and why.
- */
-static void
-nm_device_slave_notify_release(NMDevice *self, NMDeviceStateReason reason)
-{
-    NMDevicePrivate *priv       = NM_DEVICE_GET_PRIVATE(self);
-    NMConnection *   connection = nm_device_get_applied_connection(self);
-    const char *     master_status;
-
-    g_return_if_fail(priv->master);
-
-    if (priv->state > NM_DEVICE_STATE_DISCONNECTED && priv->state <= NM_DEVICE_STATE_ACTIVATED) {
-        switch (nm_device_state_reason_check(reason)) {
-        case NM_DEVICE_STATE_REASON_DEPENDENCY_FAILED:
-            master_status = "failed";
-            break;
-        case NM_DEVICE_STATE_REASON_USER_REQUESTED:
-            reason        = NM_DEVICE_STATE_REASON_DEPENDENCY_FAILED;
-            master_status = "deactivated by user request";
-            break;
-        case NM_DEVICE_STATE_REASON_CONNECTION_REMOVED:
-            reason        = NM_DEVICE_STATE_REASON_DEPENDENCY_FAILED;
-            master_status = "deactivated because master was removed";
-            break;
-        default:
-            master_status = "deactivated";
-            break;
-        }
-
-        _LOGD(LOGD_DEVICE,
-              "Activation: connection '%s' master %s",
-              nm_connection_get_id(connection),
-              master_status);
-
-        /* Cancel any pending activation sources */
-        _cancel_activation(self);
-        nm_device_queue_state(self, NM_DEVICE_STATE_DEACTIVATING, reason);
-    } else
-        _LOGI(LOGD_DEVICE, "released from master device %s", nm_device_get_iface(priv->master));
-
-    if (priv->is_enslaved) {
-        priv->is_enslaved = FALSE;
-        _notify(self, PROP_MASTER);
-        _notify(priv->master, PROP_SLAVES);
-    }
-}
-
-/**
- * nm_device_removed:
- * @self: the #NMDevice
- * @unconfigure_ip_config: whether to clear the IP config objects
- *   of the device (provided, it is still not cleared at this point).
- *
- * Called by the manager when the device was removed. Releases the device from
- * the master in case it's enslaved.
- */
-void
-nm_device_removed(NMDevice *self, gboolean unconfigure_ip_config)
-{
-    NMDevicePrivate *priv;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-    if (priv->master) {
-        /* this is called when something externally messes with the slave or during shut-down.
-         * Release the slave from master, but don't touch the device. */
-        nm_device_master_release_one_slave(priv->master,
-                                           self,
-                                           FALSE,
-                                           FALSE,
-                                           NM_DEVICE_STATE_REASON_CONNECTION_ASSUMED);
-    }
-
-    if (unconfigure_ip_config) {
-        nm_device_set_ip_config(self, AF_INET, NULL, FALSE, NULL);
-        nm_device_set_ip_config(self, AF_INET6, NULL, FALSE, NULL);
-    } else {
-        if (priv->dhcp_data_4.client)
-            nm_dhcp_client_stop(priv->dhcp_data_4.client, FALSE);
-        if (priv->dhcp_data_6.client)
-            nm_dhcp_client_stop(priv->dhcp_data_6.client, FALSE);
-    }
-}
-
-static gboolean
-is_available(NMDevice *self, NMDeviceCheckDevAvailableFlags flags)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->carrier || priv->ignore_carrier)
-        return TRUE;
-
-    if (NM_FLAGS_HAS(flags, _NM_DEVICE_CHECK_DEV_AVAILABLE_IGNORE_CARRIER))
-        return TRUE;
-
-    /* master types are always available even without carrier. */
-    if (nm_device_is_master(self))
-        return TRUE;
-
-    return FALSE;
-}
-
-/**
- * nm_device_is_available:
- * @self: the #NMDevice
- * @flags: additional flags to influence the check. Flags have the
- *   meaning to increase the availability of a device.
- *
- * Checks if @self would currently be capable of activating a
- * connection. In particular, it checks that the device is ready (eg,
- * is not missing firmware), that it has carrier (if necessary), and
- * that any necessary external software (eg, ModemManager,
- * wpa_supplicant) is available.
- *
- * @self can only be in a state higher than
- * %NM_DEVICE_STATE_UNAVAILABLE when nm_device_is_available() returns
- * %TRUE. (But note that it can still be %NM_DEVICE_STATE_UNMANAGED
- * when it is available.)
- *
- * Returns: %TRUE or %FALSE
- */
-gboolean
-nm_device_is_available(NMDevice *self, NMDeviceCheckDevAvailableFlags flags)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->firmware_missing)
-        return FALSE;
-
-    return NM_DEVICE_GET_CLASS(self)->is_available(self, flags);
-}
-
-gboolean
-nm_device_ignore_carrier_by_default(NMDevice *self)
-{
-    /* master types ignore-carrier by default. */
-    return nm_device_is_master(self);
-}
-
-gboolean
-nm_device_get_enabled(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    if (NM_DEVICE_GET_CLASS(self)->get_enabled)
-        return NM_DEVICE_GET_CLASS(self)->get_enabled(self);
-    return TRUE;
-}
-
-void
-nm_device_set_enabled(NMDevice *self, gboolean enabled)
-{
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    if (NM_DEVICE_GET_CLASS(self)->set_enabled)
-        NM_DEVICE_GET_CLASS(self)->set_enabled(self, enabled);
-}
-
-static NM_UTILS_FLAGS2STR_DEFINE(_autoconnect_blocked_flags_to_string,
-                                 NMDeviceAutoconnectBlockedFlags,
-                                 NM_UTILS_FLAGS2STR(NM_DEVICE_AUTOCONNECT_BLOCKED_NONE, "none"),
-                                 NM_UTILS_FLAGS2STR(NM_DEVICE_AUTOCONNECT_BLOCKED_USER, "user"),
-                                 NM_UTILS_FLAGS2STR(NM_DEVICE_AUTOCONNECT_BLOCKED_WRONG_PIN,
-                                                    "wrong-pin"),
-                                 NM_UTILS_FLAGS2STR(NM_DEVICE_AUTOCONNECT_BLOCKED_MANUAL_DISCONNECT,
-                                                    "manual-disconnect"), );
-
-NMDeviceAutoconnectBlockedFlags
-nm_device_autoconnect_blocked_get(NMDevice *self, NMDeviceAutoconnectBlockedFlags mask)
-{
-    NMDevicePrivate *priv;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    if (mask == 0)
-        mask = NM_DEVICE_AUTOCONNECT_BLOCKED_ALL;
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-    return priv->autoconnect_blocked_flags & mask;
-}
-
-void
-nm_device_autoconnect_blocked_set_full(NMDevice *                      self,
-                                       NMDeviceAutoconnectBlockedFlags mask,
-                                       NMDeviceAutoconnectBlockedFlags value)
-{
-    NMDevicePrivate *priv;
-    gboolean         changed;
-    char             buf1[128], buf2[128];
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-    nm_assert(mask);
-    nm_assert(!NM_FLAGS_ANY(mask, ~NM_DEVICE_AUTOCONNECT_BLOCKED_ALL));
-    nm_assert(!NM_FLAGS_ANY(value, ~mask));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    value = (priv->autoconnect_blocked_flags & ~mask) | (mask & value);
-    if (value == priv->autoconnect_blocked_flags)
-        return;
-
-    changed = ((!value) != (!priv->autoconnect_blocked_flags));
-
-    _LOGT(
-        LOGD_DEVICE,
-        "autoconnect-blocked: set \"%s\" (was \"%s\")",
-        _autoconnect_blocked_flags_to_string(value, buf1, sizeof(buf1)),
-        _autoconnect_blocked_flags_to_string(priv->autoconnect_blocked_flags, buf2, sizeof(buf2)));
-
-    priv->autoconnect_blocked_flags = value;
-    nm_assert(priv->autoconnect_blocked_flags == value);
-    if (changed)
-        _notify(self, PROP_AUTOCONNECT);
-}
-
-static gboolean
-autoconnect_allowed_accumulator(GSignalInvocationHint *ihint,
-                                GValue *               return_accu,
-                                const GValue *         handler_return,
-                                gpointer               data)
-{
-    if (!g_value_get_boolean(handler_return))
-        g_value_set_boolean(return_accu, FALSE);
-    return TRUE;
-}
-
-/**
- * nm_device_autoconnect_allowed:
- * @self: the #NMDevice
- *
- * Returns: %TRUE if the device can be auto-connected immediately, taking
- * transient conditions into account (like companion devices that may wish to
- * block autoconnect for a time).
- */
-gboolean
-nm_device_autoconnect_allowed(NMDevice *self)
-{
-    NMDevicePrivate *priv     = NM_DEVICE_GET_PRIVATE(self);
-    NMDeviceClass *  klass    = NM_DEVICE_GET_CLASS(self);
-    GValue           instance = G_VALUE_INIT;
-    GValue           retval   = G_VALUE_INIT;
-
-    if (nm_device_autoconnect_blocked_get(self, NM_DEVICE_AUTOCONNECT_BLOCKED_ALL))
-        return FALSE;
-
-    if (klass->get_autoconnect_allowed && !klass->get_autoconnect_allowed(self))
-        return FALSE;
-
-    if (!nm_device_get_enabled(self))
-        return FALSE;
-
-    if (nm_device_is_real(self)) {
-        if (priv->state < NM_DEVICE_STATE_DISCONNECTED)
-            return FALSE;
-    } else {
-        if (!nm_device_check_unrealized_device_managed(self))
-            return FALSE;
-    }
-
-    if (priv->delete_on_deactivate_data)
-        return FALSE;
-
-    /* The 'autoconnect-allowed' signal is emitted on a device to allow
-     * other listeners to block autoconnect on the device if they wish.
-     * This is mainly used by the OLPC Mesh devices to block autoconnect
-     * on their companion Wi-Fi device as they share radio resources and
-     * cannot be connected at the same time.
-     */
-
-    g_value_init(&instance, G_TYPE_OBJECT);
-    g_value_set_object(&instance, self);
-
-    g_value_init(&retval, G_TYPE_BOOLEAN);
-    g_value_set_boolean(&retval, TRUE);
-
-    /* Use g_signal_emitv() rather than g_signal_emit() to avoid the return
-     * value being changed if no handlers are connected */
-    g_signal_emitv(&instance, signals[AUTOCONNECT_ALLOWED], 0, &retval);
-    g_value_unset(&instance);
-
-    return g_value_get_boolean(&retval);
-}
-
-static gboolean
-can_auto_connect(NMDevice *self, NMSettingsConnection *sett_conn, char **specific_object)
-{
-    nm_assert(!specific_object || !*specific_object);
-    return TRUE;
-}
-
-/**
- * nm_device_can_auto_connect:
- * @self: an #NMDevice
- * @sett_conn: a #NMSettingsConnection
- * @specific_object: (out) (transfer full): on output, the path of an
- *   object associated with the returned connection, to be passed to
- *   nm_manager_activate_connection(), or %NULL.
- *
- * Checks if @sett_conn can be auto-activated on @self right now.
- * This requires, at a minimum, that the connection be compatible with
- * @self, and that it have the #NMSettingConnection:autoconnect property
- * set, and that the device allow auto connections. Some devices impose
- * additional requirements. (Eg, a Wi-Fi connection can only be activated
- * if its SSID was seen in the last scan.)
- *
- * Returns: %TRUE, if the @sett_conn can be auto-activated.
- **/
-gboolean
-nm_device_can_auto_connect(NMDevice *self, NMSettingsConnection *sett_conn, char **specific_object)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-    g_return_val_if_fail(NM_IS_SETTINGS_CONNECTION(sett_conn), FALSE);
-    g_return_val_if_fail(!specific_object || !*specific_object, FALSE);
-
-    /* the caller must ensure that nm_device_autoconnect_allowed() returns
-     * TRUE as well. This is done, because nm_device_can_auto_connect()
-     * has only one caller, and it iterates over a list of available
-     * connections.
-     *
-     * Hence, we don't need to re-check nm_device_autoconnect_allowed()
-     * over and over again. The caller is supposed to do that. */
-    nm_assert(nm_device_autoconnect_allowed(self));
-
-    if (!nm_device_check_connection_available(self,
-                                              nm_settings_connection_get_connection(sett_conn),
-                                              NM_DEVICE_CHECK_CON_AVAILABLE_NONE,
-                                              NULL,
-                                              NULL))
-        return FALSE;
-
-    if (!NM_DEVICE_GET_CLASS(self)->can_auto_connect(self, sett_conn, specific_object))
-        return FALSE;
-
-    return TRUE;
-}
-
-static gboolean
-device_has_config(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    /* Check for IP configuration. */
-    if (priv->ip_config_4 && nm_ip4_config_get_num_addresses(priv->ip_config_4))
-        return TRUE;
-    if (priv->ip_config_6 && nm_ip6_config_get_num_addresses(priv->ip_config_6))
-        return TRUE;
-
-    /* The existence of a software device is good enough. */
-    if (nm_device_is_software(self) && nm_device_is_real(self))
-        return TRUE;
-
-    /* Master-slave relationship is also a configuration */
-    if (!c_list_is_empty(&priv->slaves)
-        || nm_platform_link_get_master(nm_device_get_platform(self), priv->ifindex) > 0)
-        return TRUE;
-
-    return FALSE;
-}
-
-/**
- * nm_device_master_update_slave_connection:
- * @self: the master #NMDevice
- * @slave: the slave #NMDevice
- * @connection: the #NMConnection to update with the slave settings
- * @GError: (out): error description
- *
- * Reads the slave configuration for @slave and updates @connection with those
- * properties. This invokes a virtual function on the master device @self.
- *
- * Returns: %TRUE if the configuration was read and @connection updated,
- * %FALSE on failure.
- */
-gboolean
-nm_device_master_update_slave_connection(NMDevice *    self,
-                                         NMDevice *    slave,
-                                         NMConnection *connection,
-                                         GError **     error)
-{
-    NMDeviceClass *klass;
-    gboolean       success;
-
-    g_return_val_if_fail(self, FALSE);
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-    g_return_val_if_fail(slave, FALSE);
-    g_return_val_if_fail(connection, FALSE);
-    g_return_val_if_fail(!error || !*error, FALSE);
-    g_return_val_if_fail(nm_connection_get_setting_connection(connection), FALSE);
-
-    g_return_val_if_fail(nm_device_get_iface(self), FALSE);
-
-    klass = NM_DEVICE_GET_CLASS(self);
-    if (klass->master_update_slave_connection) {
-        success = klass->master_update_slave_connection(self, slave, connection, error);
-
-        g_return_val_if_fail(!error || (success && !*error) || *error, success);
-        return success;
-    }
-
-    g_set_error(error,
-                NM_DEVICE_ERROR,
-                NM_DEVICE_ERROR_FAILED,
-                "master device '%s' cannot update a slave connection for slave device '%s' (master "
-                "type not supported?)",
-                nm_device_get_iface(self),
-                nm_device_get_iface(slave));
-    return FALSE;
-}
-
-static gboolean
-_get_maybe_ipv6_disabled(NMDevice *self)
-{
-    NMPlatform *platform;
-    int         ifindex;
-    const char *path;
-    char        ifname[IFNAMSIZ];
-
-    ifindex = nm_device_get_ip_ifindex(self);
-    if (ifindex <= 0)
-        return FALSE;
-
-    platform = nm_device_get_platform(self);
-    if (!nm_platform_if_indextoname(platform, ifindex, ifname))
-        return FALSE;
-
-    path = nm_sprintf_bufa(128, "/proc/sys/net/ipv6/conf/%s/disable_ipv6", ifname);
-    return (nm_platform_sysctl_get_int32(platform, NMP_SYSCTL_PATHID_ABSOLUTE(path), 0) == 0);
-}
-
-NMConnection *
-nm_device_generate_connection(NMDevice *self,
-                              NMDevice *master,
-                              gboolean *out_maybe_later,
-                              GError ** error)
-{
-    NMDeviceClass *  klass                   = NM_DEVICE_GET_CLASS(self);
-    NMDevicePrivate *priv                    = NM_DEVICE_GET_PRIVATE(self);
-    const char *     ifname                  = nm_device_get_iface(self);
-    gs_unref_object NMConnection *connection = NULL;
-    NMSetting *                   s_con;
-    NMSetting *                   s_ip4;
-    NMSetting *                   s_ip6;
-    char                          uuid[37];
-    const char *                  ip4_method, *ip6_method;
-    GError *                      local = NULL;
-    const NMPlatformLink *        pllink;
-
-    NM_SET_OUT(out_maybe_later, FALSE);
-
-    /* If update_connection() is not implemented, just fail. */
-    if (!klass->update_connection) {
-        g_set_error(error,
-                    NM_DEVICE_ERROR,
-                    NM_DEVICE_ERROR_FAILED,
-                    "device class %s does not support generating a connection",
-                    G_OBJECT_TYPE_NAME(self));
-        return NULL;
-    }
-
-    /* Return NULL if device is unconfigured. */
-    if (!device_has_config(self)) {
-        g_set_error(error,
-                    NM_DEVICE_ERROR,
-                    NM_DEVICE_ERROR_FAILED,
-                    "device has no existing configuration");
-        return NULL;
-    }
-
-    connection = nm_simple_connection_new();
-    s_con      = nm_setting_connection_new();
-
-    g_object_set(s_con,
-                 NM_SETTING_CONNECTION_UUID,
-                 nm_utils_uuid_generate_buf(uuid),
-                 NM_SETTING_CONNECTION_ID,
-                 ifname,
-                 NM_SETTING_CONNECTION_AUTOCONNECT,
-                 FALSE,
-                 NM_SETTING_CONNECTION_INTERFACE_NAME,
-                 ifname,
-                 NM_SETTING_CONNECTION_TIMESTAMP,
-                 (guint64) time(NULL),
-                 NULL);
-
-    if (klass->connection_type_supported)
-        g_object_set(s_con, NM_SETTING_CONNECTION_TYPE, klass->connection_type_supported, NULL);
-
-    nm_connection_add_setting(connection, s_con);
-
-    /* If the device is a slave, update various slave settings */
-    if (master) {
-        if (!nm_device_master_update_slave_connection(master, self, connection, &local)) {
-            g_set_error(error,
-                        NM_DEVICE_ERROR,
-                        NM_DEVICE_ERROR_FAILED,
-                        "master device '%s' failed to update slave connection: %s",
-                        nm_device_get_iface(master),
-                        local->message);
-            g_error_free(local);
-            return NULL;
-        }
-    } else {
-        /* Only regular and master devices get IP configuration; slaves do not */
-        s_ip4 = nm_ip4_config_create_setting(priv->ip_config_4);
-        nm_connection_add_setting(connection, s_ip4);
-
-        s_ip6 = nm_ip6_config_create_setting(priv->ip_config_6, _get_maybe_ipv6_disabled(self));
-        nm_connection_add_setting(connection, s_ip6);
-
-        nm_connection_add_setting(connection, nm_setting_proxy_new());
-
-        pllink = nm_platform_link_get(nm_device_get_platform(self), priv->ifindex);
-        if (pllink && pllink->inet6_token.id) {
-            char sbuf[NM_UTILS_INET_ADDRSTRLEN];
-
-            g_object_set(s_ip6,
-                         NM_SETTING_IP6_CONFIG_ADDR_GEN_MODE,
-                         NM_IN6_ADDR_GEN_MODE_EUI64,
-                         NM_SETTING_IP6_CONFIG_TOKEN,
-                         nm_utils_inet6_interface_identifier_to_token(pllink->inet6_token, sbuf),
-                         NULL);
-        }
-    }
-
-    klass->update_connection(self, connection);
-
-    if (!nm_connection_normalize(connection, NULL, NULL, &local)) {
-        g_set_error(error,
-                    NM_DEVICE_ERROR,
-                    NM_DEVICE_ERROR_FAILED,
-                    "generated connection does not verify: %s",
-                    local->message);
-        g_error_free(local);
-        return NULL;
-    }
-
-    /* Ignore the connection if it has no IP configuration,
-     * no slave configuration, and is not a master interface.
-     */
-    ip4_method = nm_utils_get_ip_config_method(connection, AF_INET);
-    ip6_method = nm_utils_get_ip_config_method(connection, AF_INET6);
-    if (nm_streq0(ip4_method, NM_SETTING_IP4_CONFIG_METHOD_DISABLED)
-        && NM_IN_STRSET(ip6_method,
-                        NM_SETTING_IP6_CONFIG_METHOD_IGNORE,
-                        NM_SETTING_IP6_CONFIG_METHOD_DISABLED)
-        && !nm_setting_connection_get_master(NM_SETTING_CONNECTION(s_con))
-        && c_list_is_empty(&priv->slaves)) {
-        NM_SET_OUT(out_maybe_later, TRUE);
-        g_set_error_literal(
-            error,
-            NM_DEVICE_ERROR,
-            NM_DEVICE_ERROR_FAILED,
-            "ignoring generated connection (no IP and not in master-slave relationship)");
-        return NULL;
-    }
-
-    /* Ignore any IPv6LL-only, not master connections without slaves,
-     * unless they are in the assume-ipv6ll-only list.
-     */
-    if (nm_streq0(ip4_method, NM_SETTING_IP4_CONFIG_METHOD_DISABLED)
-        && nm_streq0(ip6_method, NM_SETTING_IP6_CONFIG_METHOD_LINK_LOCAL)
-        && !nm_setting_connection_get_master(NM_SETTING_CONNECTION(s_con))
-        && c_list_is_empty(&priv->slaves)
-        && !nm_config_data_get_assume_ipv6ll_only(NM_CONFIG_GET_DATA, self)) {
-        _LOGD(LOGD_DEVICE,
-              "ignoring generated connection (IPv6LL-only and not in master-slave relationship)");
-        NM_SET_OUT(out_maybe_later, TRUE);
-        g_set_error_literal(
-            error,
-            NM_DEVICE_ERROR,
-            NM_DEVICE_ERROR_FAILED,
-            "ignoring generated connection (IPv6LL-only and not in master-slave relationship)");
-        return NULL;
-    }
-
-    return g_steal_pointer(&connection);
-}
-
-/**
- * nm_device_complete_connection:
- *
- * Complete the connection. This is solely used for AddAndActivate where the user
- * may pass in an incomplete connection and a device, and the device tries to
- * make sense of it and complete it for activation. Otherwise, this is not
- * used.
- *
- * Returns: success or failure.
- */
-gboolean
-nm_device_complete_connection(NMDevice *           self,
-                              NMConnection *       connection,
-                              const char *         specific_object,
-                              NMConnection *const *existing_connections,
-                              GError **            error)
-{
-    NMDeviceClass *klass;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-    g_return_val_if_fail(NM_IS_CONNECTION(connection), FALSE);
-
-    klass = NM_DEVICE_GET_CLASS(self);
-
-    if (!klass->complete_connection) {
-        g_set_error(error,
-                    NM_DEVICE_ERROR,
-                    NM_DEVICE_ERROR_INVALID_CONNECTION,
-                    "Device class %s had no complete_connection method",
-                    G_OBJECT_TYPE_NAME(self));
-        return FALSE;
-    }
-
-    if (!klass->complete_connection(self, connection, specific_object, existing_connections, error))
-        return FALSE;
-
-    if (!nm_connection_normalize(connection, NULL, NULL, error))
-        return FALSE;
-
-    return nm_device_check_connection_compatible(self, connection, error);
-}
-
-gboolean
-nm_device_match_parent(NMDevice *self, const char *parent)
-{
-    NMDevice *parent_device;
-
-    g_return_val_if_fail(parent, FALSE);
-
-    parent_device = nm_device_parent_get_device(self);
-    if (!parent_device)
-        return FALSE;
-
-    if (nm_utils_is_uuid(parent)) {
-        NMConnection *connection;
-
-        /* If the parent is a UUID, the connection matches when there is
-         * no connection active on the device or when a connection with
-         * that UUID is active.
-         */
-        connection = nm_device_get_applied_connection(parent_device);
-        if (connection && !nm_streq0(parent, nm_connection_get_uuid(connection)))
-            return FALSE;
-    } else {
-        /* Interface name */
-        if (!nm_streq0(parent, nm_device_get_ip_iface(parent_device)))
-            return FALSE;
-    }
-
-    return TRUE;
-}
-
-gboolean
-nm_device_match_parent_hwaddr(NMDevice *    device,
-                              NMConnection *connection,
-                              gboolean      fail_if_no_hwaddr)
-{
-    NMSettingWired *s_wired;
-    NMDevice *      parent_device;
-    const char *    setting_mac;
-    const char *    parent_mac;
-
-    s_wired = nm_connection_get_setting_wired(connection);
-    if (!s_wired)
-        return !fail_if_no_hwaddr;
-
-    setting_mac = nm_setting_wired_get_mac_address(s_wired);
-    if (!setting_mac)
-        return !fail_if_no_hwaddr;
-
-    parent_device = nm_device_parent_get_device(device);
-    if (!parent_device)
-        return !fail_if_no_hwaddr;
-
-    parent_mac = nm_device_get_permanent_hw_address(parent_device);
-    return parent_mac && nm_utils_hwaddr_matches(setting_mac, -1, parent_mac, -1);
-}
-
-static gboolean
-check_connection_compatible(NMDevice *self, NMConnection *connection, GError **error)
-{
-    NMDevicePrivate *priv            = NM_DEVICE_GET_PRIVATE(self);
-    const char *     device_iface    = nm_device_get_iface(self);
-    gs_free_error GError *local      = NULL;
-    gs_free char *        conn_iface = NULL;
-    NMDeviceClass *       klass;
-    NMSettingMatch *      s_match;
-
-    klass = NM_DEVICE_GET_CLASS(self);
-    if (klass->connection_type_check_compatible) {
-        if (!_nm_connection_check_main_setting(connection,
-                                               klass->connection_type_check_compatible,
-                                               error))
-            return FALSE;
-    } else if (klass->check_connection_compatible == check_connection_compatible) {
-        /* the device class does not implement check_connection_compatible nor set
-         * connection_type_check_compatible. That means, it is by default not compatible
-         * with any connection type. */
-        nm_utils_error_set_literal(error,
-                                   NM_UTILS_ERROR_CONNECTION_AVAILABLE_INCOMPATIBLE,
-                                   "device does not support any connections");
-        return FALSE;
-    }
-
-    conn_iface = nm_manager_get_connection_iface(NM_MANAGER_GET, connection, NULL, NULL, &local);
-
-    /* We always need a interface name for virtual devices, but for
-     * physical ones a connection without interface name is fine for
-     * any device. */
-    if (!conn_iface) {
-        if (nm_connection_is_virtual(connection)) {
-            nm_utils_error_set(error,
-                               NM_UTILS_ERROR_CONNECTION_AVAILABLE_TEMPORARY,
-                               "cannot get interface name due to %s",
-                               local->message);
-            return FALSE;
-        }
-    } else if (!nm_streq0(conn_iface, device_iface)) {
-        nm_utils_error_set_literal(error,
-                                   NM_UTILS_ERROR_CONNECTION_AVAILABLE_TEMPORARY,
-                                   "mismatching interface name");
-        return FALSE;
-    }
-
-    s_match = (NMSettingMatch *) nm_connection_get_setting(connection, NM_TYPE_SETTING_MATCH);
-    if (s_match) {
-        const char *const *patterns;
-        const char *       device_driver;
-        guint              num_patterns = 0;
-
-        patterns = nm_setting_match_get_interface_names(s_match, &num_patterns);
-        if (!nm_wildcard_match_check(device_iface, patterns, num_patterns)) {
-            nm_utils_error_set_literal(error,
-                                       NM_UTILS_ERROR_CONNECTION_AVAILABLE_TEMPORARY,
-                                       "device does not satisfy match.interface-name property");
-            return FALSE;
-        }
-
-        patterns = nm_setting_match_get_kernel_command_lines(s_match, &num_patterns);
-        if (num_patterns > 0
-            && !nm_utils_kernel_cmdline_match_check(nm_utils_proc_cmdline_split(),
-                                                    patterns,
-                                                    num_patterns,
-                                                    error))
-            return FALSE;
-
-        device_driver = nm_device_get_driver(self);
-        patterns      = nm_setting_match_get_drivers(s_match, &num_patterns);
-        if (!nm_wildcard_match_check(device_driver, patterns, num_patterns)) {
-            nm_utils_error_set_literal(error,
-                                       NM_UTILS_ERROR_CONNECTION_AVAILABLE_TEMPORARY,
-                                       "device does not satisfy match.driver property");
-            return FALSE;
-        }
-
-        patterns = nm_setting_match_get_paths(s_match, &num_patterns);
-        if (!nm_wildcard_match_check(priv->path, patterns, num_patterns)) {
-            nm_utils_error_set_literal(error,
-                                       NM_UTILS_ERROR_CONNECTION_AVAILABLE_INCOMPATIBLE,
-                                       "device does not satisfy match.path property");
-            return FALSE;
-        }
-    }
-
-    return TRUE;
-}
-
-/**
- * nm_device_check_connection_compatible:
- * @self: an #NMDevice
- * @connection: an #NMConnection
- * @error: optional reason why it is incompatible. Note that the
- *   error code is set to %NM_UTILS_ERROR_CONNECTION_AVAILABLE_INCOMPATIBLE,
- *   if the profile is fundamentally incompatible with the device
- *   (most commonly, because the device-type does not support the
- *   connection-type).
- *
- * Checks if @connection could potentially be activated on @self.
- * This means only that @self has the proper capabilities, and that
- * @connection is not locked to some other device. It does not
- * necessarily mean that @connection could be activated on @self
- * right now. (Eg, it might refer to a Wi-Fi network that is not
- * currently available.)
- *
- * Returns: #TRUE if @connection could potentially be activated on
- *   @self.
- */
-gboolean
-nm_device_check_connection_compatible(NMDevice *self, NMConnection *connection, GError **error)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-    g_return_val_if_fail(NM_IS_CONNECTION(connection), FALSE);
-
-    return NM_DEVICE_GET_CLASS(self)->check_connection_compatible(self, connection, error);
-}
-
-gboolean
-nm_device_check_slave_connection_compatible(NMDevice *self, NMConnection *slave)
-{
-    NMSettingConnection *s_con;
-    const char *         connection_type, *slave_type;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-    g_return_val_if_fail(NM_IS_CONNECTION(slave), FALSE);
-
-    if (!nm_device_is_master(self))
-        return FALSE;
-
-    /* All masters should have connection type set */
-    connection_type = NM_DEVICE_GET_CLASS(self)->connection_type_supported;
-    g_return_val_if_fail(connection_type, FALSE);
-
-    s_con = nm_connection_get_setting_connection(slave);
-    g_assert(s_con);
-    slave_type = nm_setting_connection_get_slave_type(s_con);
-    if (!slave_type)
-        return FALSE;
-
-    return nm_streq(connection_type, slave_type);
-}
-
-/**
- * nm_device_can_assume_connections:
- * @self: #NMDevice instance
- *
- * This is a convenience function to determine whether connection assumption
- * is available for this device.
- *
- * Returns: %TRUE if the device is capable of assuming connections, %FALSE if not
- */
-static gboolean
-nm_device_can_assume_connections(NMDevice *self)
-{
-    return !!NM_DEVICE_GET_CLASS(self)->update_connection;
-}
-
-static gboolean
-unmanaged_on_quit(NMDevice *self)
-{
-    NMConnection *connection;
-
-    /* NMDeviceWifi overwrites this function to always unmanage wifi devices.
-     *
-     * For all other types, if the device type can assume connections, we leave
-     * it up on quit.
-     *
-     * Originally, we would only keep devices up that can be assumed afterwards.
-     * However, that meant we unmanged layer-2 only devices. So, this was step
-     * by step refined to unmanage less (commit 25aaaab3, rh#1311988, rh#1333983).
-     * But there are more scenarios where we also want to keep the device up
-     * (rh#1378418, rh#1371126). */
-    if (!nm_device_can_assume_connections(self))
-        return TRUE;
-
-    /* the only exception are IPv4 shared connections. We unmanage them on quit. */
-    connection = nm_device_get_applied_connection(self);
-    if (connection) {
-        if (NM_IN_STRSET(nm_utils_get_ip_config_method(connection, AF_INET),
-                         NM_SETTING_IP4_CONFIG_METHOD_SHARED)) {
-            /* shared connections are to be unmangaed. */
-            return TRUE;
-        }
-    }
-
-    return FALSE;
-}
-
-gboolean
-nm_device_unmanage_on_quit(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    return NM_DEVICE_GET_CLASS(self)->unmanaged_on_quit(self);
-}
-
-static gboolean
-nm_device_emit_recheck_assume(gpointer user_data)
-{
-    NMDevice *       self = user_data;
-    NMDevicePrivate *priv;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), G_SOURCE_REMOVE);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    priv->recheck_assume_id = 0;
-    if (!nm_device_get_act_request(self))
-        g_signal_emit(self, signals[RECHECK_ASSUME], 0);
-
-    return G_SOURCE_REMOVE;
-}
-
-void
-nm_device_queue_recheck_assume(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!priv->recheck_assume_id && nm_device_can_assume_connections(self))
-        priv->recheck_assume_id = g_idle_add(nm_device_emit_recheck_assume, self);
-}
-
-static gboolean
-recheck_available(gpointer user_data)
-{
-    NMDevice *       self = NM_DEVICE(user_data);
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    gboolean         now_available;
-    NMDeviceState    state     = nm_device_get_state(self);
-    NMDeviceState    new_state = NM_DEVICE_STATE_UNKNOWN;
-
-    priv->recheck_available.call_id = 0;
-
-    now_available = nm_device_is_available(self, NM_DEVICE_CHECK_DEV_AVAILABLE_NONE);
-
-    if (state == NM_DEVICE_STATE_UNAVAILABLE && now_available) {
-        new_state = NM_DEVICE_STATE_DISCONNECTED;
-        nm_device_queue_state(self, new_state, priv->recheck_available.available_reason);
-    } else if (state >= NM_DEVICE_STATE_DISCONNECTED && !now_available) {
-        new_state = NM_DEVICE_STATE_UNAVAILABLE;
-        nm_device_queue_state(self, new_state, priv->recheck_available.unavailable_reason);
-    }
-
-    if (new_state > NM_DEVICE_STATE_UNKNOWN) {
-        _LOGD(LOGD_DEVICE,
-              "is %savailable, %s %s",
-              now_available ? "" : "not ",
-              new_state == NM_DEVICE_STATE_UNAVAILABLE ? "no change required for"
-                                                       : "will transition to",
-              nm_device_state_to_str(new_state == NM_DEVICE_STATE_UNAVAILABLE ? state : new_state));
-
-        priv->recheck_available.available_reason   = NM_DEVICE_STATE_REASON_NONE;
-        priv->recheck_available.unavailable_reason = NM_DEVICE_STATE_REASON_NONE;
-    }
-
-    if (priv->recheck_available.call_id == 0)
-        nm_device_remove_pending_action(self, NM_PENDING_ACTION_RECHECK_AVAILABLE, TRUE);
-
-    return G_SOURCE_REMOVE;
-}
-
-void
-nm_device_queue_recheck_available(NMDevice *          self,
-                                  NMDeviceStateReason available_reason,
-                                  NMDeviceStateReason unavailable_reason)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    priv->recheck_available.available_reason   = available_reason;
-    priv->recheck_available.unavailable_reason = unavailable_reason;
-    if (!priv->recheck_available.call_id) {
-        priv->recheck_available.call_id = g_idle_add(recheck_available, self);
-        nm_device_add_pending_action (self, NM_PENDING_ACTION_RECHECK_AVAILABLE,
-                                      FALSE /* cannot assert, because of how recheck_available() first clears
-                                             * the call-id and postpones removing the pending-action. */);
-    }
-}
-
-void
-nm_device_emit_recheck_auto_activate(NMDevice *self)
-{
-    g_signal_emit(self, signals[RECHECK_AUTO_ACTIVATE], 0);
-}
-
-static void
-dnsmasq_state_changed_cb(NMDnsMasqManager *manager, guint32 status, gpointer user_data)
-{
-    NMDevice *self = NM_DEVICE(user_data);
-
-    switch (status) {
-    case NM_DNSMASQ_STATUS_DEAD:
-        nm_device_ip_method_failed(self, AF_INET, NM_DEVICE_STATE_REASON_SHARED_START_FAILED);
-        break;
-    default:
-        break;
-    }
-}
-
-void
-nm_device_auth_request(NMDevice *                     self,
-                       GDBusMethodInvocation *        context,
-                       NMConnection *                 connection,
-                       const char *                   permission,
-                       gboolean                       allow_interaction,
-                       GCancellable *                 cancellable,
-                       NMManagerDeviceAuthRequestFunc callback,
-                       gpointer                       user_data)
-{
-    nm_manager_device_auth_request(nm_device_get_manager(self),
-                                   self,
-                                   context,
-                                   connection,
-                                   permission,
-                                   allow_interaction,
-                                   cancellable,
-                                   callback,
-                                   user_data);
-}
-
-/*****************************************************************************/
-
-static void
-activation_source_clear(NMDevice *self, int addr_family)
-{
-    NMDevicePrivate *priv    = NM_DEVICE_GET_PRIVATE(self);
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-
-    if (priv->activation_source_id_x[IS_IPv4] != 0) {
-        _LOGD(LOGD_DEVICE,
-              "activation-stage: clear %s,v%c (id %u)",
-              _activation_func_to_string(priv->activation_source_func_x[IS_IPv4]),
-              nm_utils_addr_family_to_char(addr_family),
-              priv->activation_source_id_x[IS_IPv4]);
-        nm_clear_g_source(&priv->activation_source_id_x[IS_IPv4]);
-        priv->activation_source_func_x[IS_IPv4] = NULL;
-    }
-}
-
-static gboolean
-activation_source_handle_cb(NMDevice *self, int addr_family)
-{
-    NMDevicePrivate *    priv;
-    const gboolean       IS_IPv4 = (addr_family == AF_INET);
-    ActivationHandleFunc activation_source_func;
-    guint                activation_source_id;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), G_SOURCE_REMOVE);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    activation_source_func = priv->activation_source_func_x[IS_IPv4];
-    activation_source_id   = priv->activation_source_id_x[IS_IPv4];
-
-    g_return_val_if_fail(activation_source_id != 0, G_SOURCE_REMOVE);
-    nm_assert(activation_source_func);
-
-    priv->activation_source_func_x[IS_IPv4] = NULL;
-    priv->activation_source_id_x[IS_IPv4]   = 0;
-
-    _LOGD(LOGD_DEVICE,
-          "activation-stage: invoke %s,v%c (id %u)",
-          _activation_func_to_string(activation_source_func),
-          nm_utils_addr_family_to_char(addr_family),
-          activation_source_id);
-
-    activation_source_func(self);
-
-    _LOGT(LOGD_DEVICE,
-          "activation-stage: complete %s,v%c (id %u)",
-          _activation_func_to_string(activation_source_func),
-          nm_utils_addr_family_to_char(addr_family),
-          activation_source_id);
-
-    return G_SOURCE_REMOVE;
-}
-
-static gboolean
-activation_source_handle_cb_4(gpointer user_data)
-{
-    return activation_source_handle_cb(user_data, AF_INET);
-}
-
-static gboolean
-activation_source_handle_cb_6(gpointer user_data)
-{
-    return activation_source_handle_cb(user_data, AF_INET6);
-}
-
-static void
-activation_source_schedule(NMDevice *self, ActivationHandleFunc func, int addr_family)
-{
-    NMDevicePrivate *priv    = NM_DEVICE_GET_PRIVATE(self);
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-    guint            new_id  = 0;
-
-    if (priv->activation_source_id_x[IS_IPv4] != 0
-        && priv->activation_source_func_x[IS_IPv4] == func) {
-        /* Scheduling the same stage multiple times is fine. */
-        _LOGT(LOGD_DEVICE,
-              "activation-stage: already scheduled %s,v%c (id %u)",
-              _activation_func_to_string(func),
-              nm_utils_addr_family_to_char(addr_family),
-              priv->activation_source_id_x[IS_IPv4]);
-        return;
-    }
-
-    new_id =
-        g_idle_add(IS_IPv4 ? activation_source_handle_cb_4 : activation_source_handle_cb_6, self);
-
-    if (priv->activation_source_id_x[IS_IPv4] != 0) {
-        _LOGD(LOGD_DEVICE,
-              "activation-stage: schedule %s,v%c which replaces %s,v%c (id %u -> %u)",
-              _activation_func_to_string(func),
-              nm_utils_addr_family_to_char(addr_family),
-              _activation_func_to_string(priv->activation_source_func_x[IS_IPv4]),
-              nm_utils_addr_family_to_char(addr_family),
-              priv->activation_source_id_x[IS_IPv4],
-              new_id);
-        nm_clear_g_source(&priv->activation_source_id_x[IS_IPv4]);
-    } else {
-        _LOGD(LOGD_DEVICE,
-              "activation-stage: schedule %s,v%c (id %u)",
-              _activation_func_to_string(func),
-              nm_utils_addr_family_to_char(addr_family),
-              new_id);
-    }
-
-    priv->activation_source_func_x[IS_IPv4] = func;
-    priv->activation_source_id_x[IS_IPv4]   = new_id;
-}
-
-static void
-activation_source_invoke_sync(NMDevice *self, ActivationHandleFunc func, int addr_family)
-{
-    NMDevicePrivate *priv    = NM_DEVICE_GET_PRIVATE(self);
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-
-    if (priv->activation_source_id_x[IS_IPv4] == 0) {
-        _LOGD(LOGD_DEVICE,
-              "activation-stage: synchronously invoke %s,v%c",
-              _activation_func_to_string(func),
-              nm_utils_addr_family_to_char(addr_family));
-    } else if (priv->activation_source_func_x[IS_IPv4] == func) {
-        _LOGD(LOGD_DEVICE,
-              "activation-stage: synchronously invoke %s,v%c which was already scheduled (id %u)",
-              _activation_func_to_string(func),
-              nm_utils_addr_family_to_char(addr_family),
-              priv->activation_source_id_x[IS_IPv4]);
-    } else {
-        _LOGD(LOGD_DEVICE,
-              "activation-stage: synchronously invoke %s,v%c which replaces %s,v%c (id %u)",
-              _activation_func_to_string(func),
-              nm_utils_addr_family_to_char(addr_family),
-              _activation_func_to_string(priv->activation_source_func_x[IS_IPv4]),
-              nm_utils_addr_family_to_char(addr_family),
-              priv->activation_source_id_x[IS_IPv4]);
-    }
-
-    nm_clear_g_source(&priv->activation_source_id_x[IS_IPv4]);
-    priv->activation_source_func_x[IS_IPv4] = NULL;
-
-    func(self);
-}
-
-/*****************************************************************************/
-
-static void
-master_ready(NMDevice *self, NMActiveConnection *active)
-{
-    NMDevicePrivate *   priv = NM_DEVICE_GET_PRIVATE(self);
-    NMActiveConnection *master_connection;
-    NMDevice *          master;
-
-    /* Notify a master device that it has a new slave */
-    nm_assert(nm_active_connection_get_master_ready(active));
-
-    master_connection = nm_active_connection_get_master(active);
-
-    master = nm_active_connection_get_device(master_connection);
-
-    _LOGD(LOGD_DEVICE, "master connection ready; master device %s", nm_device_get_iface(master));
-
-    if (priv->master && priv->master != master)
-        nm_device_master_release_one_slave(priv->master,
-                                           self,
-                                           FALSE,
-                                           FALSE,
-                                           NM_DEVICE_STATE_REASON_CONNECTION_ASSUMED);
-
-    /* If the master didn't change, add-slave only rechecks whether to assume a connection. */
-    nm_device_master_add_slave(master,
-                               self,
-                               !nm_device_sys_iface_state_is_external_or_assume(self));
-}
-
-static void
-master_ready_cb(NMActiveConnection *active, GParamSpec *pspec, NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    nm_assert(nm_active_connection_get_master_ready(active));
-
-    if (priv->state == NM_DEVICE_STATE_PREPARE)
-        nm_device_activate_schedule_stage1_device_prepare(self, FALSE);
-}
-
-static void
-lldp_neighbors_changed(NMLldpListener *lldp_listener, GParamSpec *pspec, gpointer user_data)
-{
-    NMDevice *self = NM_DEVICE(user_data);
-
-    _notify(self, PROP_LLDP_NEIGHBORS);
-}
-
-static NMPlatformVF *
-sriov_vf_config_to_platform(NMDevice *self, NMSriovVF *vf, GError **error)
-{
-    NMDevicePrivate *priv         = NM_DEVICE_GET_PRIVATE(self);
-    gs_free NMPlatformVF *plat_vf = NULL;
-    const guint *         vlan_ids;
-    GVariant *            variant;
-    guint                 i, num_vlans;
-    gsize                 length;
-
-    g_return_val_if_fail(!error || !*error, FALSE);
-
-    vlan_ids = nm_sriov_vf_get_vlan_ids(vf, &num_vlans);
-    plat_vf  = g_malloc0(sizeof(NMPlatformVF) + sizeof(NMPlatformVFVlan) * num_vlans);
-
-    plat_vf->index = nm_sriov_vf_get_index(vf);
-
-    variant = nm_sriov_vf_get_attribute(vf, NM_SRIOV_VF_ATTRIBUTE_SPOOF_CHECK);
-    if (variant)
-        plat_vf->spoofchk = g_variant_get_boolean(variant);
-    else
-        plat_vf->spoofchk = -1;
-
-    variant = nm_sriov_vf_get_attribute(vf, NM_SRIOV_VF_ATTRIBUTE_TRUST);
-    if (variant)
-        plat_vf->trust = g_variant_get_boolean(variant);
-    else
-        plat_vf->trust = -1;
-
-    variant = nm_sriov_vf_get_attribute(vf, NM_SRIOV_VF_ATTRIBUTE_MAC);
-    if (variant) {
-        if (!_nm_utils_hwaddr_aton(g_variant_get_string(variant, NULL),
-                                   plat_vf->mac.data,
-                                   sizeof(plat_vf->mac.data),
-                                   &length)) {
-            g_set_error(error,
-                        NM_DEVICE_ERROR,
-                        NM_DEVICE_ERROR_FAILED,
-                        "invalid MAC %s",
-                        g_variant_get_string(variant, NULL));
-            return NULL;
-        }
-        if (length != priv->hw_addr_len) {
-            g_set_error(error,
-                        NM_DEVICE_ERROR,
-                        NM_DEVICE_ERROR_FAILED,
-                        "wrong MAC length %" G_GSIZE_FORMAT ", should be %u",
-                        length,
-                        priv->hw_addr_len);
-            return NULL;
-        }
-        plat_vf->mac.len = length;
-    }
-
-    variant = nm_sriov_vf_get_attribute(vf, NM_SRIOV_VF_ATTRIBUTE_MIN_TX_RATE);
-    if (variant)
-        plat_vf->min_tx_rate = g_variant_get_uint32(variant);
-
-    variant = nm_sriov_vf_get_attribute(vf, NM_SRIOV_VF_ATTRIBUTE_MAX_TX_RATE);
-    if (variant)
-        plat_vf->max_tx_rate = g_variant_get_uint32(variant);
-
-    plat_vf->num_vlans = num_vlans;
-    plat_vf->vlans     = (NMPlatformVFVlan *) (&plat_vf[1]);
-    for (i = 0; i < num_vlans; i++) {
-        plat_vf->vlans[i].id  = vlan_ids[i];
-        plat_vf->vlans[i].qos = nm_sriov_vf_get_vlan_qos(vf, vlan_ids[i]);
-        plat_vf->vlans[i].proto_ad =
-            nm_sriov_vf_get_vlan_protocol(vf, vlan_ids[i]) == NM_SRIOV_VF_VLAN_PROTOCOL_802_1AD;
-    }
-
-    return g_steal_pointer(&plat_vf);
-}
-
-static void
-sriov_params_cb(GError *error, gpointer data)
-{
-    NMDevice *       self;
-    NMDevicePrivate *priv;
-    nm_auto_freev NMPlatformVF **plat_vfs = NULL;
-
-    nm_utils_user_data_unpack(data, &self, &plat_vfs);
-
-    if (nm_utils_error_is_cancelled_or_disposing(error))
-        return;
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (error) {
-        _LOGE(LOGD_DEVICE, "failed to set SR-IOV parameters: %s", error->message);
-        nm_device_state_changed(self,
-                                NM_DEVICE_STATE_FAILED,
-                                NM_DEVICE_STATE_REASON_SRIOV_CONFIGURATION_FAILED);
-        return;
-    }
-
-    if (!nm_platform_link_set_sriov_vfs(nm_device_get_platform(self),
-                                        priv->ifindex,
-                                        (const NMPlatformVF *const *) plat_vfs)) {
-        _LOGE(LOGD_DEVICE, "failed to apply SR-IOV VFs");
-        nm_device_state_changed(self,
-                                NM_DEVICE_STATE_FAILED,
-                                NM_DEVICE_STATE_REASON_SRIOV_CONFIGURATION_FAILED);
-        return;
-    }
-
-    priv->stage1_sriov_state = NM_DEVICE_STAGE_STATE_COMPLETED;
-
-    nm_device_activate_schedule_stage1_device_prepare(self, FALSE);
-}
-
-/*
- * activate_stage1_device_prepare
- *
- * Prepare for device activation
- *
- */
-static void
-activate_stage1_device_prepare(NMDevice *self)
-{
-    NMDevicePrivate *   priv = NM_DEVICE_GET_PRIVATE(self);
-    NMActStageReturn    ret  = NM_ACT_STAGE_RETURN_SUCCESS;
-    NMActiveConnection *active;
-    NMActiveConnection *master;
-    NMDeviceClass *     klass;
-
-    priv->v4_route_table_initialized = FALSE;
-    priv->v6_route_table_initialized = FALSE;
-
-    _set_ip_state(self, AF_INET, NM_DEVICE_IP_STATE_NONE);
-    _set_ip_state(self, AF_INET6, NM_DEVICE_IP_STATE_NONE);
-
-    /* Notify the new ActiveConnection along with the state change */
-    nm_dbus_track_obj_path_set(&priv->act_request, priv->act_request.obj, TRUE);
-
-    nm_device_state_changed(self, NM_DEVICE_STATE_PREPARE, NM_DEVICE_STATE_REASON_NONE);
-
-    if (priv->stage1_sriov_state != NM_DEVICE_STAGE_STATE_COMPLETED) {
-        NMSettingSriov *s_sriov;
-
-        if (nm_device_sys_iface_state_is_external_or_assume(self)) {
-            /* pass */
-        } else if (priv->stage1_sriov_state == NM_DEVICE_STAGE_STATE_PENDING)
-            return;
-        else if (priv->ifindex > 0 && nm_device_has_capability(self, NM_DEVICE_CAP_SRIOV)
-                 && (s_sriov = nm_device_get_applied_setting(self, NM_TYPE_SETTING_SRIOV))) {
-            nm_auto_freev NMPlatformVF **plat_vfs = NULL;
-            gs_free_error GError *error           = NULL;
-            NMSriovVF *           vf;
-            NMTernary             autoprobe;
-            guint                 i, num;
-
-            autoprobe = nm_setting_sriov_get_autoprobe_drivers(s_sriov);
-            if (autoprobe == NM_TERNARY_DEFAULT) {
-                autoprobe = nm_config_data_get_connection_default_int64(
-                    NM_CONFIG_GET_DATA,
-                    NM_CON_DEFAULT("sriov.autoprobe-drivers"),
-                    self,
-                    NM_TERNARY_FALSE,
-                    NM_TERNARY_TRUE,
-                    NM_TERNARY_TRUE);
-            }
-
-            num      = nm_setting_sriov_get_num_vfs(s_sriov);
-            plat_vfs = g_new0(NMPlatformVF *, num + 1);
-            for (i = 0; i < num; i++) {
-                vf          = nm_setting_sriov_get_vf(s_sriov, i);
-                plat_vfs[i] = sriov_vf_config_to_platform(self, vf, &error);
-                if (!plat_vfs[i]) {
-                    _LOGE(LOGD_DEVICE,
-                          "failed to apply SR-IOV VF '%s': %s",
-                          nm_utils_sriov_vf_to_str(vf, FALSE, NULL),
-                          error->message);
-                    nm_device_state_changed(self,
-                                            NM_DEVICE_STATE_FAILED,
-                                            NM_DEVICE_STATE_REASON_SRIOV_CONFIGURATION_FAILED);
-                    return;
-                }
-            }
-
-            /* When changing the number of VFs the kernel can block
-             * for very long time in the write to sysfs, especially
-             * if autoprobe-drivers is enabled. Do it asynchronously
-             * to avoid blocking the entire NM process.
-             */
-            sriov_op_queue(self,
-                           nm_setting_sriov_get_total_vfs(s_sriov),
-                           autoprobe,
-                           sriov_params_cb,
-                           nm_utils_user_data_pack(self, g_steal_pointer(&plat_vfs)));
-            priv->stage1_sriov_state = NM_DEVICE_STAGE_STATE_PENDING;
-            return;
-        }
-        priv->stage1_sriov_state = NM_DEVICE_STAGE_STATE_COMPLETED;
-    }
-
-    /* Assumed connections were already set up outside NetworkManager */
-    klass = NM_DEVICE_GET_CLASS(self);
-
-    if (klass->act_stage1_prepare_set_hwaddr_ethernet
-        && !nm_device_sys_iface_state_is_external_or_assume(self)) {
-        if (!nm_device_hw_addr_set_cloned(self, nm_device_get_applied_connection(self), FALSE)) {
-            nm_device_state_changed(self,
-                                    NM_DEVICE_STATE_FAILED,
-                                    NM_DEVICE_STATE_REASON_CONFIG_FAILED);
-            return;
-        }
-    }
-
-    if (klass->act_stage1_prepare_also_for_external_or_assume
-        || !nm_device_sys_iface_state_is_external_or_assume(self)) {
-        nm_assert(!klass->act_stage1_prepare_also_for_external_or_assume
-                  || klass->act_stage1_prepare);
-        if (klass->act_stage1_prepare) {
-            NMDeviceStateReason failure_reason = NM_DEVICE_STATE_REASON_NONE;
-
-            ret = klass->act_stage1_prepare(self, &failure_reason);
-            if (ret == NM_ACT_STAGE_RETURN_FAILURE) {
-                nm_device_state_changed(self, NM_DEVICE_STATE_FAILED, failure_reason);
-                return;
-            }
-            if (ret == NM_ACT_STAGE_RETURN_POSTPONE)
-                return;
-
-            nm_assert(ret == NM_ACT_STAGE_RETURN_SUCCESS);
-        }
-    }
-
-    active = NM_ACTIVE_CONNECTION(priv->act_request.obj);
-    master = nm_active_connection_get_master(active);
-    if (master) {
-        if (nm_active_connection_get_state(master) >= NM_ACTIVE_CONNECTION_STATE_DEACTIVATING) {
-            _LOGD(LOGD_DEVICE, "master connection is deactivating");
-            nm_device_state_changed(self,
-                                    NM_DEVICE_STATE_FAILED,
-                                    NM_DEVICE_STATE_REASON_DEPENDENCY_FAILED);
-            return;
-        }
-        /* If the master connection is ready for slaves, attach ourselves */
-        if (!nm_active_connection_get_master_ready(active)) {
-            if (priv->master_ready_id == 0) {
-                _LOGD(LOGD_DEVICE, "waiting for master connection to become ready");
-                priv->master_ready_id =
-                    g_signal_connect(active,
-                                     "notify::" NM_ACTIVE_CONNECTION_INT_MASTER_READY,
-                                     (GCallback) master_ready_cb,
-                                     self);
-            }
-            return;
-        }
-    }
-    nm_clear_g_signal_handler(priv->act_request.obj, &priv->master_ready_id);
-    if (master)
-        master_ready(self, active);
-    else if (priv->master) {
-        nm_device_master_release_one_slave(priv->master,
-                                           self,
-                                           TRUE,
-                                           TRUE,
-                                           NM_DEVICE_STATE_REASON_CONNECTION_ASSUMED);
-    }
-
-    nm_device_activate_schedule_stage2_device_config(self, TRUE);
-}
-
-void
-nm_device_activate_schedule_stage1_device_prepare(NMDevice *self, gboolean do_sync)
-{
-    g_return_if_fail(NM_IS_DEVICE(self));
-    g_return_if_fail(NM_DEVICE_GET_PRIVATE(self)->act_request.obj);
-
-    if (!do_sync) {
-        activation_source_schedule(self, activate_stage1_device_prepare, AF_INET);
-        return;
-    }
-
-    activation_source_invoke_sync(self, activate_stage1_device_prepare, AF_INET);
-}
-
-static NMActStageReturn
-act_stage2_config(NMDevice *self, NMDeviceStateReason *out_failure_reason)
-{
-    return NM_ACT_STAGE_RETURN_SUCCESS;
-}
-
-static void
-lldp_init(NMDevice *self, gboolean restart)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->ifindex > 0 && _prop_get_connection_lldp(self)) {
-        gs_free_error GError *error = NULL;
-
-        if (priv->lldp_listener) {
-            if (restart && nm_lldp_listener_is_running(priv->lldp_listener))
-                nm_lldp_listener_stop(priv->lldp_listener);
-        } else {
-            priv->lldp_listener = nm_lldp_listener_new();
-            g_signal_connect(priv->lldp_listener,
-                             "notify::" NM_LLDP_LISTENER_NEIGHBORS,
-                             G_CALLBACK(lldp_neighbors_changed),
-                             self);
-        }
-
-        if (!nm_lldp_listener_is_running(priv->lldp_listener)) {
-            if (nm_lldp_listener_start(priv->lldp_listener, nm_device_get_ifindex(self), &error))
-                _LOGD(LOGD_DEVICE, "LLDP listener %p started", priv->lldp_listener);
-            else {
-                _LOGD(LOGD_DEVICE,
-                      "LLDP listener %p could not be started: %s",
-                      priv->lldp_listener,
-                      error->message);
-            }
-        }
-    } else {
-        if (priv->lldp_listener)
-            nm_lldp_listener_stop(priv->lldp_listener);
-    }
-}
-
-/* set-mode can be:
- *  - TRUE: sync with new rules.
- *  - FALSE: sync, but remove all rules (== flush)
- *  - DEFAULT: forget about all the rules that we previously tracked,
- *       but don't actually remove them. This is when quitting NM
- *       we want to keep the rules.
- *       The problem is, after restart of NM, the rule manager will
- *       no longer remember that NM added these rules and treat them
- *       as externally added ones. Don't restart NetworkManager if
- *       you care about that.
- */
-static void
-_routing_rules_sync(NMDevice *self, NMTernary set_mode)
-{
-    NMDevicePrivate *priv               = NM_DEVICE_GET_PRIVATE(self);
-    NMPRulesManager *rules_manager      = nm_netns_get_rules_manager(nm_device_get_netns(self));
-    NMDeviceClass *  klass              = NM_DEVICE_GET_CLASS(self);
-    gboolean         untrack_only_dirty = FALSE;
-    gboolean         keep_deleted_rules;
-    gpointer         user_tag_1;
-    gpointer         user_tag_2;
-
-    /* take two arbitrary user-tag pointers that belong to @self. */
-    user_tag_1 = &priv->v4_route_table;
-    user_tag_2 = &priv->v6_route_table;
-
-    if (set_mode == NM_TERNARY_TRUE) {
-        NMConnection *     applied_connection;
-        NMSettingIPConfig *s_ip;
-        guint              i, num;
-        int                is_ipv4;
-
-        untrack_only_dirty = TRUE;
-        nmp_rules_manager_set_dirty(rules_manager, user_tag_1);
-        if (klass->get_extra_rules)
-            nmp_rules_manager_set_dirty(rules_manager, user_tag_2);
-
-        applied_connection = nm_device_get_applied_connection(self);
-
-        for (is_ipv4 = 0; applied_connection && is_ipv4 < 2; is_ipv4++) {
-            int addr_family = is_ipv4 ? AF_INET : AF_INET6;
-
-            s_ip = nm_connection_get_setting_ip_config(applied_connection, addr_family);
-            if (!s_ip)
-                continue;
-
-            num = nm_setting_ip_config_get_num_routing_rules(s_ip);
-            for (i = 0; i < num; i++) {
-                NMPlatformRoutingRule plrule;
-                NMIPRoutingRule *     rule;
-
-                rule = nm_setting_ip_config_get_routing_rule(s_ip, i);
-                nm_ip_routing_rule_to_platform(rule, &plrule);
-
-                /* We track this rule, but we also make it explicitly not weakly-tracked
-                 * (meaning to untrack NMP_RULES_MANAGER_EXTERN_WEAKLY_TRACKED_USER_TAG at
-                 * the same time). */
-                nmp_rules_manager_track(rules_manager,
-                                        &plrule,
-                                        10,
-                                        user_tag_1,
-                                        NMP_RULES_MANAGER_EXTERN_WEAKLY_TRACKED_USER_TAG);
-            }
-        }
-
-        if (klass->get_extra_rules) {
-            gs_unref_ptrarray GPtrArray *extra_rules = NULL;
-
-            extra_rules = klass->get_extra_rules(self);
-            if (extra_rules) {
-                for (i = 0; i < extra_rules->len; i++) {
-                    nmp_rules_manager_track(rules_manager,
-                                            NMP_OBJECT_CAST_ROUTING_RULE(extra_rules->pdata[i]),
-                                            10,
-                                            user_tag_2,
-                                            NMP_RULES_MANAGER_EXTERN_WEAKLY_TRACKED_USER_TAG);
-                }
-            }
-        }
-    }
-
-    nmp_rules_manager_untrack_all(rules_manager, user_tag_1, !untrack_only_dirty);
-    if (klass->get_extra_rules)
-        nmp_rules_manager_untrack_all(rules_manager, user_tag_2, !untrack_only_dirty);
-
-    keep_deleted_rules = FALSE;
-    if (set_mode == NM_TERNARY_DEFAULT) {
-        /* when exiting NM, we leave the device up and the rules configured.
-         * We just all nmp_rules_manager_sync() to forget about the synced rules,
-         * but we don't actually delete them.
-         *
-         * FIXME: that is a problem after restart of NetworkManager, because these
-         * rules will look like externally added, and NM will no longer remove
-         * them.
-         * To fix that, we could during "assume" mark the rules of the profile
-         * as owned (and "added" by the device). The problem with that is that it
-         * wouldn't cover rules that devices add by internal decision (not because
-         * of a setting in the profile, e.g. WireGuard could setup policy routing).
-         * Maybe it would be better to remember these orphaned rules at exit in a
-         * file and track them after restart again. */
-        keep_deleted_rules = TRUE;
-    }
-    nmp_rules_manager_sync(rules_manager, keep_deleted_rules);
-}
-
-static gboolean
-tc_commit(NMDevice *self)
-{
-    NMConnection *    connection          = NULL;
-    gs_unref_ptrarray GPtrArray *qdiscs   = NULL;
-    gs_unref_ptrarray GPtrArray *tfilters = NULL;
-    NMSettingTCConfig *          s_tc     = NULL;
-    NMPlatform *                 platform;
-    int                          ip_ifindex;
-
-    platform   = nm_device_get_platform(self);
-    connection = nm_device_get_applied_connection(self);
-    if (connection)
-        s_tc = nm_connection_get_setting_tc_config(connection);
-
-    ip_ifindex = nm_device_get_ip_ifindex(self);
-    if (!ip_ifindex)
-        return s_tc == NULL;
-
-    if (s_tc) {
-        qdiscs   = nm_utils_qdiscs_from_tc_setting(platform, s_tc, ip_ifindex);
-        tfilters = nm_utils_tfilters_from_tc_setting(platform, s_tc, ip_ifindex);
-    }
-
-    if (!nm_platform_qdisc_sync(platform, ip_ifindex, qdiscs))
-        return FALSE;
-
-    if (!nm_platform_tfilter_sync(platform, ip_ifindex, tfilters))
-        return FALSE;
-
-    return TRUE;
-}
-
-/*
- * activate_stage2_device_config
- *
- * Determine device parameters and set those on the device, ie
- * for wireless devices, set SSID, keys, etc.
- *
- */
-static void
-activate_stage2_device_config(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    NMDeviceClass *  klass;
-    NMActStageReturn ret;
-    gboolean         no_firmware = FALSE;
-    CList *          iter;
-
-    nm_device_state_changed(self, NM_DEVICE_STATE_CONFIG, NM_DEVICE_STATE_REASON_NONE);
-
-    if (!nm_device_sys_iface_state_is_external_or_assume(self))
-        _ethtool_state_set(self);
-
-    if (!nm_device_sys_iface_state_is_external_or_assume(self)) {
-        if (!tc_commit(self)) {
-            _LOGW(LOGD_IP6, "failed applying traffic control rules");
-            nm_device_state_changed(self,
-                                    NM_DEVICE_STATE_FAILED,
-                                    NM_DEVICE_STATE_REASON_CONFIG_FAILED);
-            return;
-        }
-    }
-
-    _routing_rules_sync(self, NM_TERNARY_TRUE);
-
-    if (!nm_device_sys_iface_state_is_external_or_assume(self)) {
-        if (!nm_device_bring_up(self, FALSE, &no_firmware)) {
-            nm_device_state_changed(self,
-                                    NM_DEVICE_STATE_FAILED,
-                                    no_firmware ? NM_DEVICE_STATE_REASON_FIRMWARE_MISSING
-                                                : NM_DEVICE_STATE_REASON_CONFIG_FAILED);
-            return;
-        }
-    }
-
-    klass = NM_DEVICE_GET_CLASS(self);
-    if (klass->act_stage2_config_also_for_external_or_assume
-        || !nm_device_sys_iface_state_is_external_or_assume(self)) {
-        NMDeviceStateReason failure_reason = NM_DEVICE_STATE_REASON_NONE;
-
-        ret = klass->act_stage2_config(self, &failure_reason);
-        if (ret == NM_ACT_STAGE_RETURN_POSTPONE)
-            return;
-        if (ret != NM_ACT_STAGE_RETURN_SUCCESS) {
-            nm_assert(ret == NM_ACT_STAGE_RETURN_FAILURE);
-            nm_device_state_changed(self, NM_DEVICE_STATE_FAILED, failure_reason);
-            return;
-        }
-    }
-
-    /* If we have slaves that aren't yet enslaved, do that now */
-    c_list_for_each (iter, &priv->slaves) {
-        SlaveInfo *   info        = c_list_entry(iter, SlaveInfo, lst_slave);
-        NMDeviceState slave_state = nm_device_get_state(info->slave);
-
-        if (slave_state == NM_DEVICE_STATE_IP_CONFIG)
-            nm_device_master_enslave_slave(self,
-                                           info->slave,
-                                           nm_device_get_applied_connection(info->slave));
-        else if (priv->act_request.obj && nm_device_sys_iface_state_is_external(self)
-                 && slave_state <= NM_DEVICE_STATE_DISCONNECTED)
-            nm_device_queue_recheck_assume(info->slave);
-    }
-
-    lldp_init(self, TRUE);
-
-    nm_device_activate_schedule_stage3_ip_config_start(self);
-}
-
-void
-nm_device_activate_schedule_stage2_device_config(NMDevice *self, gboolean do_sync)
-{
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    if (!do_sync) {
-        activation_source_schedule(self, activate_stage2_device_config, AF_INET);
-        return;
-    }
-
-    activation_source_invoke_sync(self, activate_stage2_device_config, AF_INET);
-}
-
-void
-nm_device_ip_method_failed(NMDevice *self, int addr_family, NMDeviceStateReason reason)
-{
-    g_return_if_fail(NM_IS_DEVICE(self));
-    g_return_if_fail(NM_IN_SET(addr_family, AF_INET, AF_INET6));
-
-    _set_ip_state(self, addr_family, NM_DEVICE_IP_STATE_FAIL);
-
-    if (get_ip_config_may_fail(self, addr_family))
-        check_ip_state(self, FALSE, (nm_device_get_state(self) == NM_DEVICE_STATE_IP_CONFIG));
-    else
-        nm_device_state_changed(self, NM_DEVICE_STATE_FAILED, reason);
-}
-
-/*****************************************************************************/
-
-static void
-acd_data_destroy(gpointer ptr)
-{
-    AcdData *data = ptr;
-    int      i;
-
-    for (i = 0; data->configs && data->configs[i]; i++)
-        g_object_unref(data->configs[i]);
-    g_free(data->configs);
-    g_slice_free(AcdData, data);
-}
-
-static void
-ipv4_manual_method_apply(NMDevice *self, NMIP4Config **configs, gboolean success)
-{
-    NMConnection *connection;
-    const char *  method;
-
-    connection = nm_device_get_applied_connection(self);
-    nm_assert(connection);
-    method = nm_utils_get_ip_config_method(connection, AF_INET);
-    nm_assert(NM_IN_STRSET(method,
-                           NM_SETTING_IP4_CONFIG_METHOD_MANUAL,
-                           NM_SETTING_IP4_CONFIG_METHOD_AUTO));
-
-    if (!success) {
-        nm_device_ip_method_failed(self, AF_INET, NM_DEVICE_STATE_REASON_IP_ADDRESS_DUPLICATE);
-        return;
-    }
-
-    if (nm_streq(method, NM_SETTING_IP4_CONFIG_METHOD_MANUAL))
-        nm_device_activate_schedule_ip_config_result(self, AF_INET, NULL);
-    else {
-        if (NM_DEVICE_GET_PRIVATE(self)->ip_state_4 != NM_DEVICE_IP_STATE_DONE)
-            ip_config_merge_and_apply(self, AF_INET, TRUE);
-    }
-}
-
-static void
-acd_manager_probe_terminated(NMAcdManager *acd_manager, gpointer user_data)
-{
-    AcdData *                   data = user_data;
-    NMDevice *                  self;
-    NMDevicePrivate *           priv;
-    NMDedupMultiIter            ipconf_iter;
-    const NMPlatformIP4Address *address;
-    gboolean                    result, success = TRUE;
-    int                         i;
-
-    g_assert(data);
-    self = data->device;
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    for (i = 0; data->configs && data->configs[i]; i++) {
-        nm_ip_config_iter_ip4_address_for_each (&ipconf_iter, data->configs[i], &address) {
-            char sbuf[NM_UTILS_INET_ADDRSTRLEN];
-
-            result = nm_acd_manager_check_address(acd_manager, address->address);
-            success &= result;
-
-            _NMLOG(result ? LOGL_DEBUG : LOGL_WARN,
-                   LOGD_DEVICE,
-                   "IPv4 DAD result: address %s is %s",
-                   _nm_utils_inet4_ntop(address->address, sbuf),
-                   result ? "unique" : "duplicate");
-        }
-    }
-
-    data->callback(self, data->configs, success);
-
-    priv->acd.dad_list = g_slist_remove(priv->acd.dad_list, acd_manager);
-    nm_acd_manager_free(acd_manager);
-}
-
-/**
- * ipv4_dad_start:
- * @self: device instance
- * @configs: NULL-terminated array of IPv4 configurations
- * @cb: callback function
- *
- * Start IPv4 DAD on device @self, check addresses in @configs and call @cb
- * when the procedure ends. @cb will be called in any case, even if DAD can't
- * be started. @configs will be unreferenced after @cb has been called.
- */
-static void
-ipv4_dad_start(NMDevice *self, NMIP4Config **configs, AcdCallback cb)
-{
-    static const NMAcdCallbacks acd_callbacks = {
-        .probe_terminated_callback = acd_manager_probe_terminated,
-        .user_data_destroy         = acd_data_destroy,
-    };
-    NMDevicePrivate *           priv = NM_DEVICE_GET_PRIVATE(self);
-    NMAcdManager *              acd_manager;
-    const NMPlatformIP4Address *address;
-    NMDedupMultiIter            ipconf_iter;
-    AcdData *                   data;
-    guint                       timeout;
-    gboolean                    addr_found;
-    int                         r;
-    const guint8 *              hwaddr_arr;
-    size_t                      length;
-    guint                       i;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-    g_return_if_fail(configs);
-    g_return_if_fail(cb);
-
-    for (i = 0, addr_found = FALSE; configs[i]; i++) {
-        if (nm_ip4_config_get_num_addresses(configs[i]) > 0) {
-            addr_found = TRUE;
-            break;
-        }
-    }
-
-    timeout    = _prop_get_ipv4_dad_timeout(self);
-    hwaddr_arr = nm_platform_link_get_address(nm_device_get_platform(self),
-                                              nm_device_get_ip_ifindex(self),
-                                              &length);
-
-    if (!timeout || !hwaddr_arr || !addr_found || length != ETH_ALEN
-        || nm_device_sys_iface_state_is_external_or_assume(self)) {
-        /* DAD not needed, signal success */
-        cb(self, configs, TRUE);
-
-        for (i = 0; configs[i]; i++)
-            g_object_unref(configs[i]);
-        g_free(configs);
-
-        return;
-    }
-
-    data           = g_slice_new0(AcdData);
-    data->configs  = configs;
-    data->callback = cb;
-    data->device   = self;
-
-    acd_manager        = nm_acd_manager_new(nm_device_get_ip_ifindex(self),
-                                     hwaddr_arr,
-                                     length,
-                                     &acd_callbacks,
-                                     data);
-    priv->acd.dad_list = g_slist_append(priv->acd.dad_list, acd_manager);
-
-    for (i = 0; configs[i]; i++) {
-        nm_ip_config_iter_ip4_address_for_each (&ipconf_iter, configs[i], &address)
-            nm_acd_manager_add_address(acd_manager, address->address);
-    }
-
-    r = nm_acd_manager_start_probe(acd_manager, timeout);
-    if (r < 0) {
-        _LOGW(LOGD_DEVICE, "acd probe failed");
-
-        /* DAD could not be started, signal success */
-        cb(self, configs, TRUE);
-
-        priv->acd.dad_list = g_slist_remove(priv->acd.dad_list, acd_manager);
-        nm_acd_manager_free(acd_manager);
-    }
-}
-
-/*****************************************************************************/
-/* IPv4LL stuff */
-
-static void
-ipv4ll_cleanup(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->ipv4ll) {
-        sd_ipv4ll_set_callback(priv->ipv4ll, NULL, NULL);
-        sd_ipv4ll_stop(priv->ipv4ll);
-        priv->ipv4ll = sd_ipv4ll_unref(priv->ipv4ll);
-    }
-
-    nm_clear_g_source(&priv->ipv4ll_timeout);
-}
-
-static NMIP4Config *
-ipv4ll_get_ip4_config(NMDevice *self, guint32 lla)
-{
-    NMIP4Config *        config = NULL;
-    NMPlatformIP4Address address;
-    NMPlatformIP4Route   route;
-
-    config = nm_device_ip4_config_new(self);
-    g_assert(config);
-
-    memset(&address, 0, sizeof(address));
-    nm_platform_ip4_address_set_addr(&address, lla, 16);
-    address.addr_source = NM_IP_CONFIG_SOURCE_IP4LL;
-    nm_ip4_config_add_address(config, &address);
-
-    /* Add a multicast route for link-local connections: destination= 224.0.0.0, netmask=240.0.0.0 */
-    memset(&route, 0, sizeof(route));
-    route.network       = htonl(0xE0000000L);
-    route.plen          = 4;
-    route.rt_source     = NM_IP_CONFIG_SOURCE_IP4LL;
-    route.table_coerced = nm_platform_route_table_coerce(nm_device_get_route_table(self, AF_INET));
-    route.metric        = nm_device_get_route_metric(self, AF_INET);
-    nm_ip4_config_add_route(config, &route, NULL);
-
-    return config;
-}
-
-static void
-nm_device_handle_ipv4ll_event(sd_ipv4ll *ll, int event, void *data)
-{
-    NMDevice *       self = data;
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    struct in_addr   address;
-    NMIP4Config *    config;
-    int              r;
-
-    if (priv->act_request.obj == NULL)
-        return;
-
-    nm_assert(nm_streq(nm_device_get_effective_ip_config_method(self, AF_INET),
-                       NM_SETTING_IP4_CONFIG_METHOD_LINK_LOCAL));
-
-    switch (event) {
-    case SD_IPV4LL_EVENT_BIND:
-        r = sd_ipv4ll_get_address(ll, &address);
-        if (r < 0) {
-            _LOGE(LOGD_AUTOIP4, "invalid IPv4 link-local address received, error %d.", r);
-            nm_device_ip_method_failed(self, AF_INET, NM_DEVICE_STATE_REASON_AUTOIP_START_FAILED);
-            return;
-        }
-
-        if (!nm_utils_ip4_address_is_link_local(address.s_addr)) {
-            _LOGE(LOGD_AUTOIP4, "invalid address %08x received (not link-local).", address.s_addr);
-            nm_device_ip_method_failed(self, AF_INET, NM_DEVICE_STATE_REASON_AUTOIP_ERROR);
-            return;
-        }
-
-        config = ipv4ll_get_ip4_config(self, address.s_addr);
-        if (config == NULL) {
-            _LOGE(LOGD_AUTOIP4, "failed to get IPv4LL config");
-            nm_device_ip_method_failed(self, AF_INET, NM_DEVICE_STATE_REASON_AUTOIP_FAILED);
-            return;
-        }
-
-        if (priv->ip_state_4 == NM_DEVICE_IP_STATE_CONF) {
-            nm_clear_g_source(&priv->ipv4ll_timeout);
-            nm_device_activate_schedule_ip_config_result(self, AF_INET, NM_IP_CONFIG_CAST(config));
-        } else if (priv->ip_state_4 == NM_DEVICE_IP_STATE_DONE) {
-            applied_config_init(&priv->dev_ip_config_4, config);
-            if (!ip_config_merge_and_apply(self, AF_INET, TRUE)) {
-                _LOGE(LOGD_AUTOIP4, "failed to update IP4 config for autoip change.");
-                nm_device_ip_method_failed(self, AF_INET, NM_DEVICE_STATE_REASON_AUTOIP_FAILED);
-            }
-        } else
-            g_assert_not_reached();
-
-        g_object_unref(config);
-        break;
-    default:
-        _LOGW(LOGD_AUTOIP4, "IPv4LL address no longer valid after event %d.", event);
-        nm_device_ip_method_failed(self, AF_INET, NM_DEVICE_STATE_REASON_AUTOIP_FAILED);
-    }
-}
-
-static gboolean
-ipv4ll_timeout_cb(gpointer user_data)
-{
-    NMDevice *       self = NM_DEVICE(user_data);
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->ipv4ll_timeout) {
-        _LOGI(LOGD_AUTOIP4, "IPv4LL configuration timed out.");
-        priv->ipv4ll_timeout = 0;
-        ipv4ll_cleanup(self);
-
-        if (priv->ip_state_4 == NM_DEVICE_IP_STATE_CONF)
-            nm_device_activate_schedule_ip_config_timeout(self, AF_INET);
-    }
-
-    return FALSE;
-}
-
-static NMActStageReturn
-ipv4ll_start(NMDevice *self)
-{
-    NMDevicePrivate *        priv = NM_DEVICE_GET_PRIVATE(self);
-    const struct ether_addr *addr;
-    int                      ifindex, r;
-    size_t                   addr_len;
-
-    ipv4ll_cleanup(self);
-
-    r = sd_ipv4ll_new(&priv->ipv4ll);
-    if (r < 0) {
-        _LOGE(LOGD_AUTOIP4, "IPv4LL: new() failed with error %d", r);
-        return NM_ACT_STAGE_RETURN_FAILURE;
-    }
-
-    r = sd_ipv4ll_attach_event(priv->ipv4ll, NULL, 0);
-    if (r < 0) {
-        _LOGE(LOGD_AUTOIP4, "IPv4LL: attach_event() failed with error %d", r);
-        return NM_ACT_STAGE_RETURN_FAILURE;
-    }
-
-    ifindex = nm_device_get_ip_ifindex(self);
-    addr    = nm_platform_link_get_address(nm_device_get_platform(self), ifindex, &addr_len);
-    if (!addr || addr_len != ETH_ALEN) {
-        _LOGE(LOGD_AUTOIP4, "IPv4LL: can't retrieve hardware address");
-        return NM_ACT_STAGE_RETURN_FAILURE;
-    }
-
-    r = sd_ipv4ll_set_mac(priv->ipv4ll, addr);
-    if (r < 0) {
-        _LOGE(LOGD_AUTOIP4, "IPv4LL: set_mac() failed with error %d", r);
-        return NM_ACT_STAGE_RETURN_FAILURE;
-    }
-
-    r = sd_ipv4ll_set_ifindex(priv->ipv4ll, ifindex);
-    if (r < 0) {
-        _LOGE(LOGD_AUTOIP4, "IPv4LL: set_ifindex() failed with error %d", r);
-        return NM_ACT_STAGE_RETURN_FAILURE;
-    }
-
-    r = sd_ipv4ll_set_callback(priv->ipv4ll, nm_device_handle_ipv4ll_event, self);
-    if (r < 0) {
-        _LOGE(LOGD_AUTOIP4, "IPv4LL: set_callback() failed with error %d", r);
-        return NM_ACT_STAGE_RETURN_FAILURE;
-    }
-
-    r = sd_ipv4ll_start(priv->ipv4ll);
-    if (r < 0) {
-        _LOGE(LOGD_AUTOIP4, "IPv4LL: start() failed with error %d", r);
-        return NM_ACT_STAGE_RETURN_FAILURE;
-    }
-
-    _LOGI(LOGD_DEVICE | LOGD_AUTOIP4, "IPv4LL: started");
-
-    /* Start a timeout to bound the address attempt */
-    priv->ipv4ll_timeout = g_timeout_add_seconds(20, ipv4ll_timeout_cb, self);
-    return NM_ACT_STAGE_RETURN_POSTPONE;
-}
-
-/*****************************************************************************/
-
-static void
-ensure_con_ip_config(NMDevice *self, int addr_family)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    NMConnection *   connection;
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-    NMIPConfig *     con_ip_config;
-
-    if (priv->con_ip_config_x[IS_IPv4])
-        return;
-
-    connection = nm_device_get_applied_connection(self);
-    if (!connection)
-        return;
-
-    con_ip_config = nm_device_ip_config_new(self, addr_family);
-
-    if (IS_IPv4) {
-        nm_ip4_config_merge_setting(NM_IP4_CONFIG(con_ip_config),
-                                    nm_connection_get_setting_ip4_config(connection),
-                                    _prop_get_connection_mdns(self),
-                                    _prop_get_connection_llmnr(self),
-                                    nm_device_get_route_table(self, addr_family),
-                                    nm_device_get_route_metric(self, addr_family));
-    } else {
-        nm_ip6_config_merge_setting(NM_IP6_CONFIG(con_ip_config),
-                                    nm_connection_get_setting_ip6_config(connection),
-                                    nm_device_get_route_table(self, addr_family),
-                                    nm_device_get_route_metric(self, addr_family));
-    }
-
-    if (nm_device_sys_iface_state_is_external_or_assume(self)) {
-        /* For assumed connections ignore all addresses and routes. */
-        nm_ip_config_reset_addresses(con_ip_config);
-        nm_ip_config_reset_routes(con_ip_config);
-    }
-
-    priv->con_ip_config_x[IS_IPv4] = con_ip_config;
-}
-
-/*****************************************************************************/
-
-static void
-dhcp4_cleanup(NMDevice *self, CleanupType cleanup_type, gboolean release)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    priv->dhcp_data_4.was_active = FALSE;
-    nm_clear_g_source(&priv->dhcp_data_4.grace_id);
-    priv->dhcp_data_4.grace_pending = FALSE;
-    nm_clear_g_free(&priv->dhcp4.pac_url);
-
-    if (priv->dhcp_data_4.client) {
-        /* Stop any ongoing DHCP transaction on this device */
-        nm_clear_g_signal_handler(priv->dhcp_data_4.client, &priv->dhcp_data_4.state_sigid);
-
-        if (cleanup_type == CLEANUP_TYPE_DECONFIGURE || cleanup_type == CLEANUP_TYPE_REMOVED)
-            nm_dhcp_client_stop(priv->dhcp_data_4.client, release);
-
-        g_clear_object(&priv->dhcp_data_4.client);
-    }
-
-    if (priv->dhcp_data_4.config) {
-        nm_dbus_object_clear_and_unexport(&priv->dhcp_data_4.config);
-        _notify(self, PROP_DHCP4_CONFIG);
-    }
-}
-
-static gboolean
-ip_config_merge_and_apply(NMDevice *self, int addr_family, gboolean commit)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    gboolean         success;
-    gs_unref_object NMIPConfig *composite = NULL;
-    NMIPConfig *                config;
-    gs_unref_ptrarray GPtrArray *ip4_dev_route_blacklist = NULL;
-    NMConnection *               connection;
-    gboolean                     ignore_auto_routes    = FALSE;
-    gboolean                     ignore_auto_dns       = FALSE;
-    gboolean                     ignore_default_routes = FALSE;
-    GSList *                     iter;
-    const char *                 ip6_addr_gen_token = NULL;
-    const gboolean               IS_IPv4            = (addr_family == AF_INET);
-
-    if (nm_device_sys_iface_state_is_external(self))
-        commit = FALSE;
-
-    connection = nm_device_get_applied_connection(self);
-
-    /* Apply ignore-auto-routes and ignore-auto-dns settings */
-    if (connection) {
-        NMSettingIPConfig *s_ip;
-
-        s_ip = nm_connection_get_setting_ip_config(connection, addr_family);
-        if (s_ip) {
-            ignore_auto_routes = nm_setting_ip_config_get_ignore_auto_routes(s_ip);
-            ignore_auto_dns    = nm_setting_ip_config_get_ignore_auto_dns(s_ip);
-
-            /* if the connection has an explicit gateway, we also ignore
-             * the default routes from other sources. */
-            ignore_default_routes = nm_setting_ip_config_get_never_default(s_ip)
-                                    || nm_setting_ip_config_get_gateway(s_ip);
-
-            if (!IS_IPv4) {
-                NMSettingIP6Config *s_ip6 = NM_SETTING_IP6_CONFIG(s_ip);
-
-                if (nm_setting_ip6_config_get_addr_gen_mode(s_ip6)
-                    == NM_SETTING_IP6_CONFIG_ADDR_GEN_MODE_EUI64)
-                    ip6_addr_gen_token = nm_setting_ip6_config_get_token(s_ip6);
-            }
-        }
-    }
-
-    composite = nm_device_ip_config_new(self, addr_family);
-
-    if (!IS_IPv4) {
-        nm_ip6_config_set_privacy(NM_IP6_CONFIG(composite),
-                                  priv->ndisc ? priv->ndisc_use_tempaddr
-                                              : NM_SETTING_IP6_CONFIG_PRIVACY_UNKNOWN);
-    }
-
-    init_ip_config_dns_priority(self, composite);
-
-    if (commit) {
-        if (priv->queued_ip_config_id_x[IS_IPv4])
-            update_ext_ip_config(self, addr_family, FALSE);
-        ensure_con_ip_config(self, addr_family);
-    }
-
-    if (!IS_IPv4) {
-        if (commit && priv->ipv6ll_has) {
-            const NMPlatformIP6Address ll_a = {
-                .address     = priv->ipv6ll_addr,
-                .plen        = 64,
-                .addr_source = NM_IP_CONFIG_SOURCE_IP6LL,
-            };
-            const NMPlatformIP6Route ll_r = {
-                .network.s6_addr16[0] = htons(0xfe80u),
-                .plen                 = 64,
-                .metric               = nm_device_get_route_metric(self, addr_family),
-                .rt_source            = NM_IP_CONFIG_SOURCE_IP6LL,
-            };
-
-            nm_assert(IN6_IS_ADDR_LINKLOCAL(&priv->ipv6ll_addr));
-
-            nm_ip6_config_add_address(NM_IP6_CONFIG(composite), &ll_a);
-            nm_ip6_config_add_route(NM_IP6_CONFIG(composite), &ll_r, NULL);
-        }
-    }
-
-    if (commit) {
-        gboolean v;
-
-        v = default_route_metric_penalty_detect(self, addr_family);
-        if (IS_IPv4)
-            priv->default_route_metric_penalty_ip4_has = v;
-        else
-            priv->default_route_metric_penalty_ip6_has = v;
-    }
-
-    /* Merge all the IP configs into the composite config */
-
-    if (IS_IPv4) {
-        config = applied_config_get_current(&priv->dev_ip_config_4);
-        if (config) {
-            nm_ip4_config_merge(
-                NM_IP4_CONFIG(composite),
-                NM_IP4_CONFIG(config),
-                (ignore_auto_routes ? NM_IP_CONFIG_MERGE_NO_ROUTES : 0)
-                    | (ignore_default_routes ? NM_IP_CONFIG_MERGE_NO_DEFAULT_ROUTES : 0)
-                    | (ignore_auto_dns ? NM_IP_CONFIG_MERGE_NO_DNS : 0),
-                default_route_metric_penalty_get(self, addr_family));
-        }
-    }
-
-    if (!IS_IPv4) {
-        config = applied_config_get_current(&priv->ac_ip6_config);
-        if (config) {
-            nm_ip6_config_merge(
-                NM_IP6_CONFIG(composite),
-                NM_IP6_CONFIG(config),
-                (ignore_auto_routes ? NM_IP_CONFIG_MERGE_NO_ROUTES : 0)
-                    | (ignore_default_routes ? NM_IP_CONFIG_MERGE_NO_DEFAULT_ROUTES : 0)
-                    | (ignore_auto_dns ? NM_IP_CONFIG_MERGE_NO_DNS : 0),
-                default_route_metric_penalty_get(self, addr_family));
-        }
-    }
-
-    if (!IS_IPv4) {
-        config = applied_config_get_current(&priv->dhcp6.ip6_config);
-        if (config) {
-            nm_ip6_config_merge(
-                NM_IP6_CONFIG(composite),
-                NM_IP6_CONFIG(config),
-                (ignore_auto_routes ? NM_IP_CONFIG_MERGE_NO_ROUTES : 0)
-                    | (ignore_default_routes ? NM_IP_CONFIG_MERGE_NO_DEFAULT_ROUTES : 0)
-                    | (ignore_auto_dns ? NM_IP_CONFIG_MERGE_NO_DNS : 0),
-                default_route_metric_penalty_get(self, addr_family));
-        }
-    }
-
-    for (iter = priv->vpn_configs_x[IS_IPv4]; iter; iter = iter->next)
-        nm_ip_config_merge(composite, iter->data, NM_IP_CONFIG_MERGE_DEFAULT, 0);
-
-    if (priv->ext_ip_config_x[IS_IPv4])
-        nm_ip_config_merge(composite,
-                           priv->ext_ip_config_x[IS_IPv4],
-                           NM_IP_CONFIG_MERGE_EXTERNAL,
-                           0);
-
-    /* Merge WWAN config *last* to ensure modem-given settings overwrite
-     * any external stuff set by pppd or other scripts.
-     */
-    config = applied_config_get_current(&priv->dev2_ip_config_x[IS_IPv4]);
-    if (config) {
-        nm_ip_config_merge(composite,
-                           config,
-                           (ignore_auto_routes ? NM_IP_CONFIG_MERGE_NO_ROUTES : 0)
-                               | (ignore_default_routes ? NM_IP_CONFIG_MERGE_NO_DEFAULT_ROUTES : 0)
-                               | (ignore_auto_dns ? NM_IP_CONFIG_MERGE_NO_DNS : 0),
-                           default_route_metric_penalty_get(self, addr_family));
-    }
-
-    if (!IS_IPv4) {
-        if (priv->rt6_temporary_not_available) {
-            const NMPObject *o;
-            GHashTableIter   hiter;
-
-            g_hash_table_iter_init(&hiter, priv->rt6_temporary_not_available);
-            while (g_hash_table_iter_next(&hiter, (gpointer *) &o, NULL)) {
-                nm_ip6_config_add_route(NM_IP6_CONFIG(composite),
-                                        NMP_OBJECT_CAST_IP6_ROUTE(o),
-                                        NULL);
-            }
-        }
-    }
-
-    /* Merge user overrides into the composite config. For assumed connections,
-     * con_ip_config_x is empty. */
-    if (priv->con_ip_config_x[IS_IPv4]) {
-        nm_ip_config_merge(composite,
-                           priv->con_ip_config_x[IS_IPv4],
-                           NM_IP_CONFIG_MERGE_DEFAULT,
-                           default_route_metric_penalty_get(self, addr_family));
-    }
-
-    if (commit) {
-        gboolean is_vrf;
-
-        is_vrf = priv->master && nm_device_get_device_type(priv->master) == NM_DEVICE_TYPE_VRF;
-
-        if (IS_IPv4) {
-            nm_ip4_config_add_dependent_routes(NM_IP4_CONFIG(composite),
-                                               nm_device_get_route_table(self, addr_family),
-                                               nm_device_get_route_metric(self, addr_family),
-                                               is_vrf,
-                                               &ip4_dev_route_blacklist);
-        } else {
-            nm_ip6_config_add_dependent_routes(NM_IP6_CONFIG(composite),
-                                               nm_device_get_route_table(self, addr_family),
-                                               nm_device_get_route_metric(self, addr_family),
-                                               is_vrf);
-        }
-    }
-
-    if (IS_IPv4) {
-        if (commit) {
-            if (NM_DEVICE_GET_CLASS(self)->ip4_config_pre_commit)
-                NM_DEVICE_GET_CLASS(self)->ip4_config_pre_commit(self, NM_IP4_CONFIG(composite));
-        }
-    }
-
-    if (!IS_IPv4) {
-        NMUtilsIPv6IfaceId iid;
-
-        if (commit && priv->ndisc_started && ip6_addr_gen_token
-            && nm_utils_ipv6_interface_identifier_get_from_token(&iid, ip6_addr_gen_token)) {
-            set_ipv6_token(self, iid, ip6_addr_gen_token);
-        }
-    }
-
-    success =
-        nm_device_set_ip_config(self, addr_family, composite, commit, ip4_dev_route_blacklist);
-    if (commit) {
-        if (IS_IPv4)
-            priv->v4_commit_first_time = FALSE;
-        else
-            priv->v6_commit_first_time = FALSE;
-    }
-
-    return success;
-}
-
-static gboolean
-dhcp4_lease_change(NMDevice *self, NMIP4Config *config, gboolean bound)
-{
-    NMDevicePrivate *priv       = NM_DEVICE_GET_PRIVATE(self);
-    gs_free_error GError *error = NULL;
-
-    g_return_val_if_fail(config, FALSE);
-
-    applied_config_init(&priv->dev_ip_config_4, config);
-
-    if (!ip_config_merge_and_apply(self, AF_INET, TRUE)) {
-        _LOGW(LOGD_DHCP4, "failed to update IPv4 config for DHCP change.");
-        return FALSE;
-    }
-
-    /* TODO: we should perform DAD again whenever we obtain a
-     * new lease after an expiry. But what should we do if
-     * a duplicate address is detected? Fail the connection;
-     * restart DHCP; continue without an address? */
-    if (bound && !nm_dhcp_client_accept(priv->dhcp_data_4.client, &error)) {
-        _LOGW(LOGD_DHCP4, "error accepting lease: %s", error->message);
-        return FALSE;
-    }
-
-    nm_dispatcher_call_device(NM_DISPATCHER_ACTION_DHCP4_CHANGE, self, NULL, NULL, NULL, NULL);
-
-    return TRUE;
-}
-
-static gboolean
-dhcp_grace_period_expired(NMDevice *self, int addr_family)
-{
-    NMDevicePrivate *priv    = NM_DEVICE_GET_PRIVATE(self);
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-
-    priv->dhcp_data_x[IS_IPv4].grace_id      = 0;
-    priv->dhcp_data_x[IS_IPv4].grace_pending = FALSE;
-
-    _LOGI(LOGD_DHCP_from_addr_family(addr_family),
-          "DHCPv%c: grace period expired",
-          nm_utils_addr_family_to_char(addr_family));
-
-    nm_device_ip_method_failed(self, addr_family, NM_DEVICE_STATE_REASON_IP_CONFIG_EXPIRED);
-    /* If the device didn't fail, the DHCP client will continue */
-
-    return G_SOURCE_REMOVE;
-}
-
-static gboolean
-dhcp_grace_period_expired_4(gpointer user_data)
-{
-    return dhcp_grace_period_expired(user_data, AF_INET);
-}
-
-static gboolean
-dhcp_grace_period_expired_6(gpointer user_data)
-{
-    return dhcp_grace_period_expired(user_data, AF_INET6);
-}
-
-static gboolean
-dhcp_grace_period_start(NMDevice *self, int addr_family)
-{
-    NMDevicePrivate *priv    = NM_DEVICE_GET_PRIVATE(self);
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-    guint32          timeout;
-
-    /* In any other case (expired lease, assumed connection, etc.),
-     * wait for some time before failing the IP method.
-     */
-    if (priv->dhcp_data_x[IS_IPv4].grace_pending) {
-        /* already pending. */
-        return FALSE;
-    }
-
-    /* Start a grace period equal to the DHCP timeout multiplied
-     * by a constant factor. */
-    timeout = _prop_get_ipvx_dhcp_timeout(self, addr_family);
-    if (timeout == NM_DHCP_TIMEOUT_INFINITY)
-        _LOGI(LOGD_DHCP_from_addr_family(addr_family),
-              "DHCPv%c: trying to acquire a new lease",
-              nm_utils_addr_family_to_char(addr_family));
-    else {
-        timeout = dhcp_grace_period_from_timeout(timeout);
-        _LOGI(LOGD_DHCP_from_addr_family(addr_family),
-              "DHCPv%c: trying to acquire a new lease within %u seconds",
-              nm_utils_addr_family_to_char(addr_family),
-              timeout);
-        nm_assert(!priv->dhcp_data_x[IS_IPv4].grace_id);
-        priv->dhcp_data_x[IS_IPv4].grace_id = g_timeout_add_seconds(
-            timeout,
-            IS_IPv4 ? dhcp_grace_period_expired_4 : dhcp_grace_period_expired_6,
-            self);
-    }
-
-    priv->dhcp_data_x[IS_IPv4].grace_pending = TRUE;
-
-    return TRUE;
-}
-static void
-dhcp4_fail(NMDevice *self, NMDhcpState dhcp_state)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    _LOGD(LOGD_DHCP4,
-          "DHCPv4 failed (ip_state %s, was_active %d)",
-          _ip_state_to_string(priv->ip_state_4),
-          priv->dhcp_data_4.was_active);
-
-    /* The client is always left running after a failure. */
-
-    /* Nothing to do if we failed before... */
-    if (priv->ip_state_4 == NM_DEVICE_IP_STATE_FAIL)
-        goto clear_config;
-
-    /* ... and also if there are static addresses configured
-     * on the interface.
-     */
-    if (priv->ip_state_4 == NM_DEVICE_IP_STATE_DONE && priv->con_ip_config_4
-        && nm_ip4_config_get_num_addresses(priv->con_ip_config_4) > 0)
-        goto clear_config;
-
-    /* Fail the method when one of the following is true:
-     * 1) the DHCP client terminated: it does not make sense to start a grace
-     *    period without a client running;
-     * 2) we failed to get an initial lease AND the client was
-     *    not active before.
-     */
-    if (dhcp_state == NM_DHCP_STATE_TERMINATED
-        || (!priv->dhcp_data_4.was_active && priv->ip_state_4 == NM_DEVICE_IP_STATE_CONF)) {
-        nm_device_activate_schedule_ip_config_timeout(self, AF_INET);
-        return;
-    }
-
-    if (dhcp_grace_period_start(self, AF_INET))
-        goto clear_config;
-
-    return;
-
-clear_config:
-    /* The previous configuration is no longer valid */
-    if (priv->dhcp_data_4.config) {
-        nm_dbus_object_clear_and_unexport(&priv->dhcp_data_4.config);
-        priv->dhcp_data_4.config = nm_dhcp_config_new(AF_INET);
-        _notify(self, PROP_DHCP4_CONFIG);
-    }
-}
-
-static void
-dhcp4_dad_cb(NMDevice *self, NMIP4Config **configs, gboolean success)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (success) {
-        nm_device_activate_schedule_ip_config_result(self, AF_INET, NM_IP_CONFIG_CAST(configs[1]));
-    } else {
-        nm_dhcp_client_decline(priv->dhcp_data_4.client, "Address conflict detected", NULL);
-        nm_device_ip_method_failed(self, AF_INET, NM_DEVICE_STATE_REASON_IP_ADDRESS_DUPLICATE);
-    }
-}
-
-static void
-dhcp4_state_changed(NMDhcpClient *client,
-                    NMDhcpState   state,
-                    NMIP4Config * ip4_config,
-                    GHashTable *  options,
-                    gpointer      user_data)
-{
-    NMDevice *       self = NM_DEVICE(user_data);
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    NMIP4Config *    manual, **configs;
-    NMConnection *   connection;
-
-    g_return_if_fail(nm_dhcp_client_get_addr_family(client) == AF_INET);
-    g_return_if_fail(!ip4_config || NM_IS_IP4_CONFIG(ip4_config));
-
-    _LOGD(LOGD_DHCP4, "new DHCPv4 client state %d", state);
-
-    switch (state) {
-    case NM_DHCP_STATE_BOUND:
-    case NM_DHCP_STATE_EXTENDED:
-        if (!ip4_config) {
-            _LOGW(LOGD_DHCP4, "failed to get IPv4 config in response to DHCP event.");
-            dhcp4_fail(self, state);
-            break;
-        }
-
-        nm_clear_g_source(&priv->dhcp_data_4.grace_id);
-        priv->dhcp_data_4.grace_pending = FALSE;
-
-        /* After some failures, we have been able to renew the lease:
-         * update the ip state
-         */
-        if (priv->ip_state_4 == NM_DEVICE_IP_STATE_FAIL)
-            _set_ip_state(self, AF_INET, NM_DEVICE_IP_STATE_CONF);
-
-        g_free(priv->dhcp4.pac_url);
-        priv->dhcp4.pac_url = g_strdup(g_hash_table_lookup(options, "wpad"));
-        nm_device_set_proxy_config(self, priv->dhcp4.pac_url);
-
-        nm_dhcp_config_set_options(priv->dhcp_data_4.config, options);
-        _notify(self, PROP_DHCP4_CONFIG);
-
-        if (priv->ip_state_4 == NM_DEVICE_IP_STATE_CONF) {
-            connection = nm_device_get_applied_connection(self);
-            g_assert(connection);
-
-            manual = nm_device_ip4_config_new(self);
-            nm_ip4_config_merge_setting(manual,
-                                        nm_connection_get_setting_ip4_config(connection),
-                                        NM_SETTING_CONNECTION_MDNS_DEFAULT,
-                                        NM_SETTING_CONNECTION_LLMNR_DEFAULT,
-                                        nm_device_get_route_table(self, AF_INET),
-                                        nm_device_get_route_metric(self, AF_INET));
-
-            configs    = g_new0(NMIP4Config *, 3);
-            configs[0] = manual;
-            configs[1] = g_object_ref(ip4_config);
-
-            ipv4_dad_start(self, configs, dhcp4_dad_cb);
-        } else if (priv->ip_state_4 == NM_DEVICE_IP_STATE_DONE) {
-            if (dhcp4_lease_change(self, ip4_config, state == NM_DHCP_STATE_BOUND))
-                nm_device_update_metered(self);
-            else
-                dhcp4_fail(self, state);
-        }
-        break;
-    case NM_DHCP_STATE_TIMEOUT:
-        dhcp4_fail(self, state);
-        break;
-    case NM_DHCP_STATE_EXPIRE:
-        /* Ignore expiry before we even have a lease (NAK, old lease, etc) */
-        if (priv->ip_state_4 == NM_DEVICE_IP_STATE_CONF)
-            break;
-        /* fall-through */
-    case NM_DHCP_STATE_DONE:
-    case NM_DHCP_STATE_FAIL:
-    case NM_DHCP_STATE_TERMINATED:
-        dhcp4_fail(self, state);
-        break;
-    default:
-        break;
-    }
-}
-
-static NMActStageReturn
-dhcp4_start(NMDevice *self)
-{
-    NMDevicePrivate *  priv = NM_DEVICE_GET_PRIVATE(self);
-    NMSettingIPConfig *s_ip4;
-    gs_unref_bytes GBytes *vendor_class_identifier = NULL;
-    gs_unref_bytes GBytes *hwaddr                  = NULL;
-    gs_unref_bytes GBytes *bcast_hwaddr            = NULL;
-    gs_unref_bytes GBytes *client_id               = NULL;
-    gs_free char *         mud_url_free            = NULL;
-    NMConnection *         connection;
-    NMSettingConnection *  s_con;
-    GError *               error = NULL;
-    const NMPlatformLink * pllink;
-    const char *const *    reject_servers;
-
-    connection = nm_device_get_applied_connection(self);
-    g_return_val_if_fail(connection, FALSE);
-
-    s_ip4 = nm_connection_get_setting_ip4_config(connection);
-
-    s_con = nm_connection_get_setting_connection(connection);
-    nm_assert(s_con);
-
-    /* Clear old exported DHCP options */
-    nm_dbus_object_clear_and_unexport(&priv->dhcp_data_4.config);
-    priv->dhcp_data_4.config = nm_dhcp_config_new(AF_INET);
-
-    pllink = nm_platform_link_get(nm_device_get_platform(self), nm_device_get_ip_ifindex(self));
-    if (pllink) {
-        hwaddr       = nmp_link_address_get_as_bytes(&pllink->l_address);
-        bcast_hwaddr = nmp_link_address_get_as_bytes(&pllink->l_broadcast);
-    }
-
-    client_id = _prop_get_ipv4_dhcp_client_id(self, connection, hwaddr);
-    vendor_class_identifier =
-        _prop_get_ipv4_dhcp_vendor_class_identifier(self, NM_SETTING_IP4_CONFIG(s_ip4));
-    reject_servers = nm_setting_ip_config_get_dhcp_reject_servers(s_ip4, NULL);
-
-    g_warn_if_fail(priv->dhcp_data_4.client == NULL);
-    priv->dhcp_data_4.client =
-        nm_dhcp_manager_start_ip4(nm_dhcp_manager_get(),
-                                  nm_netns_get_multi_idx(nm_device_get_netns(self)),
-                                  nm_device_get_ip_iface(self),
-                                  nm_device_get_ip_ifindex(self),
-                                  hwaddr,
-                                  bcast_hwaddr,
-                                  nm_connection_get_uuid(connection),
-                                  nm_device_get_route_table(self, AF_INET),
-                                  nm_device_get_route_metric(self, AF_INET),
-                                  nm_setting_ip_config_get_dhcp_send_hostname(s_ip4),
-                                  nm_setting_ip_config_get_dhcp_hostname(s_ip4),
-                                  nm_setting_ip4_config_get_dhcp_fqdn(NM_SETTING_IP4_CONFIG(s_ip4)),
-                                  _prop_get_ipvx_dhcp_hostname_flags(self, AF_INET),
-                                  _prop_get_connection_mud_url(self, s_con, &mud_url_free),
-                                  client_id,
-                                  _prop_get_ipvx_dhcp_timeout(self, AF_INET),
-                                  priv->dhcp_anycast_address,
-                                  NULL,
-                                  vendor_class_identifier,
-                                  reject_servers,
-                                  &error);
-    if (!priv->dhcp_data_4.client) {
-        _LOGW(LOGD_DHCP4, "failure to start DHCP: %s", error->message);
-        g_clear_error(&error);
-        return NM_ACT_STAGE_RETURN_FAILURE;
-    }
-
-    priv->dhcp_data_4.state_sigid = g_signal_connect(priv->dhcp_data_4.client,
-                                                     NM_DHCP_CLIENT_SIGNAL_STATE_CHANGED,
-                                                     G_CALLBACK(dhcp4_state_changed),
-                                                     self);
-
-    if (nm_device_sys_iface_state_is_external_or_assume(self))
-        priv->dhcp_data_4.was_active = TRUE;
-
-    /* DHCP devices will be notified by the DHCP manager when stuff happens */
-    return NM_ACT_STAGE_RETURN_POSTPONE;
-}
-
-gboolean
-nm_device_dhcp4_renew(NMDevice *self, gboolean release)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    g_return_val_if_fail(priv->dhcp_data_4.client != NULL, FALSE);
-
-    _LOGI(LOGD_DHCP4, "DHCPv4 lease renewal requested");
-
-    /* Terminate old DHCP instance and release the old lease */
-    dhcp4_cleanup(self, CLEANUP_TYPE_DECONFIGURE, release);
-
-    /* Start DHCP again on the interface */
-    return dhcp4_start(self) != NM_ACT_STAGE_RETURN_FAILURE;
-}
-
-/*****************************************************************************/
-
-static NMIP4Config *
-shared4_new_config(NMDevice *self, NMConnection *connection)
-{
-    NMDevicePrivate *    priv = NM_DEVICE_GET_PRIVATE(self);
-    NMIP4Config *        config;
-    NMSettingIPConfig *  s_ip4;
-    NMPlatformIP4Address address = {
-        .addr_source = NM_IP_CONFIG_SOURCE_SHARED,
-    };
-
-    g_return_val_if_fail(self, NULL);
-    g_return_val_if_fail(connection, NULL);
-
-    s_ip4 = nm_connection_get_setting_ip4_config(connection);
-    if (s_ip4 && nm_setting_ip_config_get_num_addresses(s_ip4) > 0) {
-        /* Use the first user-supplied address */
-        NMIPAddress *user = nm_setting_ip_config_get_address(s_ip4, 0);
-        in_addr_t    a;
-
-        nm_ip_address_get_address_binary(user, &a);
-        nm_platform_ip4_address_set_addr(&address, a, nm_ip_address_get_prefix(user));
-        nm_clear_pointer(&priv->shared_ip_handle, nm_netns_shared_ip_release);
-    } else {
-        if (!priv->shared_ip_handle)
-            priv->shared_ip_handle = nm_netns_shared_ip_reserve(nm_device_get_netns(self));
-        nm_platform_ip4_address_set_addr(&address, priv->shared_ip_handle->addr, 24);
-    }
-
-    config = nm_device_ip4_config_new(self);
-    nm_ip4_config_add_address(config, &address);
-
-    return config;
-}
-
-/*****************************************************************************/
-
-static gboolean
-connection_ip_method_requires_carrier(NMConnection *connection,
-                                      int           addr_family,
-                                      gboolean *    out_ip_enabled)
-{
-    const char *method;
-
-    method = nm_utils_get_ip_config_method(connection, addr_family);
-
-    if (addr_family == AF_INET) {
-        NM_SET_OUT(out_ip_enabled, !nm_streq(method, NM_SETTING_IP4_CONFIG_METHOD_DISABLED));
-        return NM_IN_STRSET(method,
-                            NM_SETTING_IP4_CONFIG_METHOD_AUTO,
-                            NM_SETTING_IP4_CONFIG_METHOD_LINK_LOCAL);
-    }
-
-    NM_SET_OUT(out_ip_enabled,
-               !NM_IN_STRSET(method,
-                             NM_SETTING_IP6_CONFIG_METHOD_IGNORE,
-                             NM_SETTING_IP6_CONFIG_METHOD_DISABLED));
-    return NM_IN_STRSET(method,
-                        NM_SETTING_IP6_CONFIG_METHOD_AUTO,
-                        NM_SETTING_IP6_CONFIG_METHOD_DHCP,
-                        NM_SETTING_IP6_CONFIG_METHOD_SHARED,
-                        NM_SETTING_IP6_CONFIG_METHOD_LINK_LOCAL);
-}
-
-static gboolean
-connection_requires_carrier(NMConnection *connection)
-{
-    NMSettingIPConfig *  s_ip4, *s_ip6;
-    NMSettingConnection *s_con;
-    gboolean             ip4_carrier_wanted, ip6_carrier_wanted;
-    gboolean             ip4_used = FALSE, ip6_used = FALSE;
-
-    /* We can progress to IP_CONFIG now, so that we're enslaved.
-     * That may actually cause carrier to go up and thus continue activation. */
-    s_con = nm_connection_get_setting_connection(connection);
-    if (nm_setting_connection_get_master(s_con))
-        return FALSE;
-
-    ip4_carrier_wanted = connection_ip_method_requires_carrier(connection, AF_INET, &ip4_used);
-    if (ip4_carrier_wanted) {
-        /* If IPv4 wants a carrier and cannot fail, the whole connection
-         * requires a carrier regardless of the IPv6 method.
-         */
-        s_ip4 = nm_connection_get_setting_ip4_config(connection);
-        if (s_ip4 && !nm_setting_ip_config_get_may_fail(s_ip4))
-            return TRUE;
-    }
-
-    ip6_carrier_wanted = connection_ip_method_requires_carrier(connection, AF_INET6, &ip6_used);
-    if (ip6_carrier_wanted) {
-        /* If IPv6 wants a carrier and cannot fail, the whole connection
-         * requires a carrier regardless of the IPv4 method.
-         */
-        s_ip6 = nm_connection_get_setting_ip6_config(connection);
-        if (s_ip6 && !nm_setting_ip_config_get_may_fail(s_ip6))
-            return TRUE;
-    }
-
-    /* If an IP version wants a carrier and the other IP version isn't
-     * used, the connection requires carrier since it will just fail without one.
-     */
-    if (ip4_carrier_wanted && !ip6_used)
-        return TRUE;
-    if (ip6_carrier_wanted && !ip4_used)
-        return TRUE;
-
-    /* If both want a carrier, the whole connection wants a carrier */
-    return ip4_carrier_wanted && ip6_carrier_wanted;
-}
-
-static gboolean
-have_any_ready_slaves(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    SlaveInfo *      info;
-    CList *          iter;
-
-    /* Any enslaved slave is "ready" in the generic case as it's
-     * at least >= NM_DEVCIE_STATE_IP_CONFIG and has had Layer 2
-     * properties set up.
-     */
-    c_list_for_each (iter, &priv->slaves) {
-        info = c_list_entry(iter, SlaveInfo, lst_slave);
-        if (NM_DEVICE_GET_PRIVATE(info->slave)->is_enslaved)
-            return TRUE;
-    }
-    return FALSE;
-}
-
-/*****************************************************************************/
-/* DHCPv6 stuff */
-
-static void
-dhcp6_cleanup(NMDevice *self, CleanupType cleanup_type, gboolean release)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    priv->dhcp_data_6.was_active = FALSE;
-    priv->dhcp6.mode             = NM_NDISC_DHCP_LEVEL_NONE;
-    applied_config_clear(&priv->dhcp6.ip6_config);
-    nm_clear_g_free(&priv->dhcp6.event_id);
-    nm_clear_g_source(&priv->dhcp_data_6.grace_id);
-    priv->dhcp_data_6.grace_pending = FALSE;
-
-    if (priv->dhcp_data_6.client) {
-        nm_clear_g_signal_handler(priv->dhcp_data_6.client, &priv->dhcp_data_6.state_sigid);
-        nm_clear_g_signal_handler(priv->dhcp_data_6.client, &priv->dhcp6.prefix_sigid);
-
-        if (cleanup_type == CLEANUP_TYPE_DECONFIGURE || cleanup_type == CLEANUP_TYPE_REMOVED)
-            nm_dhcp_client_stop(priv->dhcp_data_6.client, release);
-
-        g_clear_object(&priv->dhcp_data_6.client);
-    }
-
-    if (priv->dhcp_data_6.config) {
-        nm_dbus_object_clear_and_unexport(&priv->dhcp_data_6.config);
-        _notify(self, PROP_DHCP6_CONFIG);
-    }
-}
-
-static gboolean
-dhcp6_lease_change(NMDevice *self)
-{
-    NMDevicePrivate *     priv = NM_DEVICE_GET_PRIVATE(self);
-    NMSettingsConnection *settings_connection;
-
-    if (!applied_config_get_current(&priv->dhcp6.ip6_config)) {
-        _LOGW(LOGD_DHCP6, "failed to get DHCPv6 config for rebind");
-        return FALSE;
-    }
-
-    g_assert(priv->dhcp_data_6.client); /* sanity check */
-
-    settings_connection = nm_device_get_settings_connection(self);
-    g_assert(settings_connection);
-
-    /* Apply the updated config */
-    if (!ip_config_merge_and_apply(self, AF_INET6, TRUE)) {
-        _LOGW(LOGD_DHCP6, "failed to update IPv6 config in response to DHCP event");
-        return FALSE;
-    }
-
-    nm_dispatcher_call_device(NM_DISPATCHER_ACTION_DHCP6_CHANGE, self, NULL, NULL, NULL, NULL);
-
-    return TRUE;
-}
-
-static void
-dhcp6_fail(NMDevice *self, NMDhcpState dhcp_state)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    gboolean         is_dhcp_managed;
-
-    _LOGD(LOGD_DHCP6,
-          "DHCPv6 failed (ip_state %s, was_active %d)",
-          _ip_state_to_string(priv->ip_state_6),
-          priv->dhcp_data_6.was_active);
-
-    /* The client is always left running after a failure. */
-
-    /* Nothing to do if we failed before... */
-    if (priv->ip_state_6 == NM_DEVICE_IP_STATE_FAIL)
-        goto clear_config;
-
-    is_dhcp_managed = (priv->dhcp6.mode == NM_NDISC_DHCP_LEVEL_MANAGED);
-
-    if (is_dhcp_managed) {
-        /* ... and also if there are static addresses configured
-         * on the interface.
-         */
-        if (priv->ip_state_6 == NM_DEVICE_IP_STATE_DONE && priv->con_ip_config_6
-            && nm_ip6_config_get_num_addresses(priv->con_ip_config_6))
-            goto clear_config;
-
-        /* Fail the method when one of the following is true:
-         * 1) the DHCP client terminated: it does not make sense to start a grace
-         *    period without a client running;
-         * 2) we failed to get an initial lease AND the client was
-         *    not active before.
-         */
-        if (dhcp_state == NM_DHCP_STATE_TERMINATED
-            || (!priv->dhcp_data_6.was_active && priv->ip_state_6 == NM_DEVICE_IP_STATE_CONF)) {
-            nm_device_activate_schedule_ip_config_timeout(self, AF_INET6);
-            return;
-        }
-
-        if (dhcp_grace_period_start(self, AF_INET6))
-            goto clear_config;
-    } else {
-        /* not a hard failure; just live with the RA info */
-        dhcp6_cleanup(self, CLEANUP_TYPE_DECONFIGURE, FALSE);
-        if (priv->ip_state_6 == NM_DEVICE_IP_STATE_CONF)
-            nm_device_activate_schedule_ip_config_result(self, AF_INET6, NULL);
-    }
-    return;
-
-clear_config:
-    /* The previous configuration is no longer valid */
-    if (priv->dhcp_data_6.config) {
-        nm_dbus_object_clear_and_unexport(&priv->dhcp_data_6.config);
-        priv->dhcp_data_6.config = nm_dhcp_config_new(AF_INET6);
-        _notify(self, PROP_DHCP6_CONFIG);
-    }
-}
-
-static void
-dhcp6_state_changed(NMDhcpClient *client,
-                    NMDhcpState   state,
-                    NMIP6Config * ip6_config,
-                    GHashTable *  options,
-                    gpointer      user_data)
-{
-    NMDevice *       self     = NM_DEVICE(user_data);
-    NMDevicePrivate *priv     = NM_DEVICE_GET_PRIVATE(self);
-    gs_free char *   event_id = NULL;
-
-    g_return_if_fail(nm_dhcp_client_get_addr_family(client) == AF_INET6);
-    g_return_if_fail(!ip6_config || NM_IS_IP6_CONFIG(ip6_config));
-
-    _LOGD(LOGD_DHCP6, "new DHCPv6 client state %d", state);
-
-    switch (state) {
-    case NM_DHCP_STATE_BOUND:
-    case NM_DHCP_STATE_EXTENDED:
-        nm_clear_g_source(&priv->dhcp_data_6.grace_id);
-        priv->dhcp_data_6.grace_pending = FALSE;
-        /* If the server sends multiple IPv6 addresses, we receive a state
-         * changed event for each of them. Use the event ID to merge IPv6
-         * addresses from the same transaction into a single configuration.
-         */
-
-        event_id = nm_dhcp_utils_get_dhcp6_event_id(options);
-
-        if (ip6_config && event_id && priv->dhcp6.event_id
-            && nm_streq(event_id, priv->dhcp6.event_id)) {
-            NMDedupMultiIter            ipconf_iter;
-            const NMPlatformIP6Address *a;
-
-            nm_ip_config_iter_ip6_address_for_each (&ipconf_iter, ip6_config, &a)
-                applied_config_add_address(&priv->dhcp6.ip6_config, NM_PLATFORM_IP_ADDRESS_CAST(a));
-        } else {
-            nm_clear_g_free(&priv->dhcp6.event_id);
-            if (ip6_config) {
-                applied_config_init(&priv->dhcp6.ip6_config, ip6_config);
-                priv->dhcp6.event_id = g_strdup(event_id);
-                nm_dhcp_config_set_options(priv->dhcp_data_6.config, options);
-                _notify(self, PROP_DHCP6_CONFIG);
-            } else
-                applied_config_clear(&priv->dhcp6.ip6_config);
-        }
-
-        /* After long time we have been able to renew the lease:
-         * update the ip state
-         */
-        if (priv->ip_state_6 == NM_DEVICE_IP_STATE_FAIL)
-            _set_ip_state(self, AF_INET6, NM_DEVICE_IP_STATE_CONF);
-
-        if (priv->ip_state_6 == NM_DEVICE_IP_STATE_CONF) {
-            if (!applied_config_get_current(&priv->dhcp6.ip6_config)) {
-                nm_device_ip_method_failed(self, AF_INET6, NM_DEVICE_STATE_REASON_DHCP_FAILED);
-                break;
-            }
-            nm_device_activate_schedule_ip_config_result(self, AF_INET6, NULL);
-        } else if (priv->ip_state_6 == NM_DEVICE_IP_STATE_DONE)
-            if (!dhcp6_lease_change(self))
-                dhcp6_fail(self, state);
-        break;
-    case NM_DHCP_STATE_TIMEOUT:
-        if (priv->dhcp6.mode == NM_NDISC_DHCP_LEVEL_MANAGED)
-            dhcp6_fail(self, state);
-        else {
-            /* not a hard failure; just live with the RA info */
-            dhcp6_cleanup(self, CLEANUP_TYPE_DECONFIGURE, FALSE);
-            if (priv->ip_state_6 == NM_DEVICE_IP_STATE_CONF)
-                nm_device_activate_schedule_ip_config_result(self, AF_INET6, NULL);
-        }
-        break;
-    case NM_DHCP_STATE_EXPIRE:
-        /* Ignore expiry before we even have a lease (NAK, old lease, etc) */
-        if (priv->ip_state_6 != NM_DEVICE_IP_STATE_CONF)
-            dhcp6_fail(self, state);
-        break;
-    case NM_DHCP_STATE_TERMINATED:
-        /* In IPv6 info-only mode, the client doesn't handle leases so it
-         * may exit right after getting a response from the server.  That's
-         * normal.  In that case we just ignore the exit.
-         */
-        if (priv->dhcp6.mode == NM_NDISC_DHCP_LEVEL_OTHERCONF)
-            break;
-        /* fall-through */
-    case NM_DHCP_STATE_DONE:
-    case NM_DHCP_STATE_FAIL:
-        dhcp6_fail(self, state);
-        break;
-    default:
-        break;
-    }
-}
-
-static void
-dhcp6_prefix_delegated(NMDhcpClient *client, NMPlatformIP6Address *prefix, gpointer user_data)
-{
-    NMDevice *self = NM_DEVICE(user_data);
-
-    /* Just re-emit. The device just contributes the prefix to the
-     * pool in NMPolicy, which decides about subnet allocation
-     * on the shared devices. */
-    g_signal_emit(self, signals[IP6_PREFIX_DELEGATED], 0, prefix);
-}
-
-/*****************************************************************************/
-
-static gboolean
-dhcp6_start_with_link_ready(NMDevice *self, NMConnection *connection)
-{
-    NMDevicePrivate *  priv = NM_DEVICE_GET_PRIVATE(self);
-    NMSettingIPConfig *s_ip6;
-    gs_unref_bytes GBytes *hwaddr            = NULL;
-    gs_unref_bytes GBytes *     duid         = NULL;
-    gboolean                    enforce_duid = FALSE;
-    const NMPlatformLink *      pllink;
-    gs_free char *              mud_url_free = NULL;
-    GError *                    error        = NULL;
-    guint32                     iaid;
-    gboolean                    iaid_explicit;
-    NMSettingConnection *       s_con;
-    const NMPlatformIP6Address *ll_addr = NULL;
-
-    g_return_val_if_fail(connection, FALSE);
-
-    s_ip6 = nm_connection_get_setting_ip6_config(connection);
-    nm_assert(s_ip6);
-    s_con = nm_connection_get_setting_connection(connection);
-    nm_assert(s_con);
-
-    if (priv->ext_ip6_config_captured) {
-        ll_addr = nm_ip6_config_find_first_address(priv->ext_ip6_config_captured,
-                                                   NM_PLATFORM_MATCH_WITH_ADDRTYPE_LINKLOCAL
-                                                       | NM_PLATFORM_MATCH_WITH_ADDRSTATE_NORMAL);
-    }
-
-    if (!ll_addr) {
-        _LOGW(LOGD_DHCP6, "can't start DHCPv6: no link-local address");
-        return FALSE;
-    }
-
-    pllink = nm_platform_link_get(nm_device_get_platform(self), nm_device_get_ip_ifindex(self));
-    if (pllink)
-        hwaddr = nmp_link_address_get_as_bytes(&pllink->l_address);
-
-    iaid = _prop_get_ipvx_dhcp_iaid(self, AF_INET6, connection, &iaid_explicit);
-    duid = _prop_get_ipv6_dhcp_duid(self, connection, hwaddr, &enforce_duid);
-
-    priv->dhcp_data_6.client = nm_dhcp_manager_start_ip6(
-        nm_dhcp_manager_get(),
-        nm_device_get_multi_index(self),
-        nm_device_get_ip_iface(self),
-        nm_device_get_ip_ifindex(self),
-        &ll_addr->address,
-        nm_connection_get_uuid(connection),
-        nm_device_get_route_table(self, AF_INET6),
-        nm_device_get_route_metric(self, AF_INET6),
-        nm_setting_ip_config_get_dhcp_send_hostname(s_ip6),
-        nm_setting_ip_config_get_dhcp_hostname(s_ip6),
-        _prop_get_ipvx_dhcp_hostname_flags(self, AF_INET6),
-        _prop_get_connection_mud_url(self, s_con, &mud_url_free),
-        duid,
-        enforce_duid,
-        iaid,
-        iaid_explicit,
-        _prop_get_ipvx_dhcp_timeout(self, AF_INET6),
-        priv->dhcp_anycast_address,
-        (priv->dhcp6.mode == NM_NDISC_DHCP_LEVEL_OTHERCONF) ? TRUE : FALSE,
-        nm_setting_ip6_config_get_ip6_privacy(NM_SETTING_IP6_CONFIG(s_ip6)),
-        priv->dhcp6.needed_prefixes,
-        &error);
-    if (!priv->dhcp_data_6.client) {
-        _LOGW(LOGD_DHCP6, "failure to start DHCPv6: %s", error->message);
-        g_clear_error(&error);
-        if (nm_device_sys_iface_state_is_external_or_assume(self))
-            priv->dhcp_data_6.was_active = TRUE;
-        return FALSE;
-    }
-
-    priv->dhcp_data_6.state_sigid = g_signal_connect(priv->dhcp_data_6.client,
-                                                     NM_DHCP_CLIENT_SIGNAL_STATE_CHANGED,
-                                                     G_CALLBACK(dhcp6_state_changed),
-                                                     self);
-    priv->dhcp6.prefix_sigid      = g_signal_connect(priv->dhcp_data_6.client,
-                                                NM_DHCP_CLIENT_SIGNAL_PREFIX_DELEGATED,
-                                                G_CALLBACK(dhcp6_prefix_delegated),
-                                                self);
-
-    if (nm_device_sys_iface_state_is_external_or_assume(self))
-        priv->dhcp_data_6.was_active = TRUE;
-
-    return TRUE;
-}
-
-static gboolean
-dhcp6_start(NMDevice *self, gboolean wait_for_ll)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    NMConnection *   connection;
-
-    nm_dbus_object_clear_and_unexport(&priv->dhcp_data_6.config);
-    priv->dhcp_data_6.config = nm_dhcp_config_new(AF_INET6);
-
-    nm_assert(!applied_config_get_current(&priv->dhcp6.ip6_config));
-    applied_config_clear(&priv->dhcp6.ip6_config);
-    nm_clear_g_free(&priv->dhcp6.event_id);
-
-    connection = nm_device_get_applied_connection(self);
-    g_return_val_if_fail(connection, FALSE);
-
-    if (wait_for_ll) {
-        /* ensure link local is ready... */
-        if (!linklocal6_start(self)) {
-            /* wait for the LL address to show up */
-            return TRUE;
-        }
-        /* already have the LL address; kick off DHCP */
-    }
-
-    if (!dhcp6_start_with_link_ready(self, connection))
-        return FALSE;
-
-    return TRUE;
-}
-
-gboolean
-nm_device_dhcp6_renew(NMDevice *self, gboolean release)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    g_return_val_if_fail(priv->dhcp_data_6.client != NULL, FALSE);
-
-    _LOGI(LOGD_DHCP6, "DHCPv6 lease renewal requested");
-
-    /* Terminate old DHCP instance and release the old lease */
-    dhcp6_cleanup(self, CLEANUP_TYPE_DECONFIGURE, release);
-
-    /* Start DHCP again on the interface */
-    return dhcp6_start(self, FALSE);
-}
-
-/*****************************************************************************/
-
-/*
- * Called on the requesting interface when a subnet can't be obtained
- * from known prefixes for a newly active shared connection.
- */
-void
-nm_device_request_ip6_prefixes(NMDevice *self, int needed_prefixes)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    priv->dhcp6.needed_prefixes = needed_prefixes;
-
-    if (priv->dhcp_data_6.client) {
-        _LOGD(LOGD_IP6, "ipv6-pd: asking DHCPv6 for %d prefixes", needed_prefixes);
-        nm_device_dhcp6_renew(self, FALSE);
-    } else {
-        _LOGI(LOGD_IP6, "ipv6-pd: device doesn't use DHCPv6, can't request prefixes");
-    }
-}
-
-gboolean
-nm_device_needs_ip6_subnet(NMDevice *self)
-{
-    return NM_DEVICE_GET_PRIVATE(self)->needs_ip6_subnet;
-}
-
-/*
- * Called on the ipv6.method=shared interface when a new subnet is allocated
- * or the prefix from which it is allocated is renewed.
- */
-void
-nm_device_use_ip6_subnet(NMDevice *self, const NMPlatformIP6Address *subnet)
-{
-    NMDevicePrivate *    priv    = NM_DEVICE_GET_PRIVATE(self);
-    NMPlatformIP6Address address = *subnet;
-    char                 sbuf[NM_UTILS_INET_ADDRSTRLEN];
-
-    if (!applied_config_get_current(&priv->ac_ip6_config))
-        applied_config_init_new(&priv->ac_ip6_config, self, AF_INET6);
-
-    /* Assign a ::1 address in the subnet for us. */
-    address.address.s6_addr32[3] |= htonl(1);
-    applied_config_add_address(&priv->ac_ip6_config, NM_PLATFORM_IP_ADDRESS_CAST(&address));
-
-    _LOGD(LOGD_IP6,
-          "ipv6-pd: using %s address (preferred for %u seconds)",
-          _nm_utils_inet6_ntop(&address.address, sbuf),
-          subnet->preferred);
-
-    /* This also updates the ndisc if there are actual changes. */
-    if (!ip_config_merge_and_apply(self, AF_INET6, TRUE))
-        _LOGW(LOGD_IP6, "ipv6-pd: failed applying IP6 config for connection sharing");
-}
-
-/*
- * Called whenever the policy picks a default IPv6 device.
- * The ipv6.method=shared devices just reuse its DNS configuration.
- */
-void
-nm_device_copy_ip6_dns_config(NMDevice *self, NMDevice *from_device)
-{
-    NMDevicePrivate *priv        = NM_DEVICE_GET_PRIVATE(self);
-    NMIP6Config *    from_config = NULL;
-    guint            i, len;
-
-    if (applied_config_get_current(&priv->ac_ip6_config)) {
-        applied_config_reset_nameservers(&priv->ac_ip6_config);
-        applied_config_reset_searches(&priv->ac_ip6_config);
-    } else
-        applied_config_init_new(&priv->ac_ip6_config, self, AF_INET6);
-
-    if (from_device)
-        from_config = nm_device_get_ip6_config(from_device);
-    if (!from_config)
-        return;
-
-    len = nm_ip6_config_get_num_nameservers(from_config);
-    for (i = 0; i < len; i++) {
-        applied_config_add_nameserver(
-            &priv->ac_ip6_config,
-            (const NMIPAddr *) nm_ip6_config_get_nameserver(from_config, i));
-    }
-
-    len = nm_ip6_config_get_num_searches(from_config);
-    for (i = 0; i < len; i++) {
-        applied_config_add_search(&priv->ac_ip6_config, nm_ip6_config_get_search(from_config, i));
-    }
-
-    if (!ip_config_merge_and_apply(self, AF_INET6, TRUE))
-        _LOGW(LOGD_IP6, "ipv6-pd: failed applying DNS config for connection sharing");
-}
-
-/*****************************************************************************/
-
-static void
-linklocal6_failed(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    nm_clear_g_source(&priv->linklocal6_timeout_id);
-    nm_device_activate_schedule_ip_config_timeout(self, AF_INET6);
-}
-
-static gboolean
-linklocal6_timeout_cb(gpointer user_data)
-{
-    NMDevice *self = user_data;
-
-    _LOGD(LOGD_DEVICE, "linklocal6: waiting for link-local addresses failed due to timeout");
-    linklocal6_failed(self);
-    return G_SOURCE_REMOVE;
-}
-
-static void
-linklocal6_check_complete(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    NMConnection *   connection;
-    const char *     method;
-
-    if (!priv->linklocal6_timeout_id) {
-        /* we are not waiting for linklocal to complete. Nothing to do. */
-        return;
-    }
-
-    if (!priv->ext_ip6_config_captured
-        || !nm_ip6_config_find_first_address(priv->ext_ip6_config_captured,
-                                             NM_PLATFORM_MATCH_WITH_ADDRTYPE_LINKLOCAL
-                                                 | NM_PLATFORM_MATCH_WITH_ADDRSTATE_NORMAL)) {
-        /* we don't have a non-tentative link local address yet. Wait longer. */
-        return;
-    }
-
-    nm_clear_g_source(&priv->linklocal6_timeout_id);
-
-    connection = nm_device_get_applied_connection(self);
-    g_assert(connection);
-
-    method = nm_device_get_effective_ip_config_method(self, AF_INET6);
-
-    _LOGD(LOGD_DEVICE,
-          "linklocal6: waiting for link-local addresses successful, continue with method %s",
-          method);
-
-    if (NM_IN_STRSET(method,
-                     NM_SETTING_IP6_CONFIG_METHOD_AUTO,
-                     NM_SETTING_IP6_CONFIG_METHOD_SHARED))
-        addrconf6_start_with_link_ready(self);
-    else if (nm_streq(method, NM_SETTING_IP6_CONFIG_METHOD_DHCP)) {
-        if (!dhcp6_start_with_link_ready(self, connection)) {
-            /* Time out IPv6 instead of failing the entire activation */
-            nm_device_activate_schedule_ip_config_timeout(self, AF_INET6);
-        }
-    } else if (nm_streq(method, NM_SETTING_IP6_CONFIG_METHOD_LINK_LOCAL))
-        nm_device_activate_schedule_ip_config_result(self, AF_INET6, NULL);
-    else
-        g_return_if_fail(FALSE);
-}
-
-static void
-check_and_add_ipv6ll_addr(NMDevice *self)
-{
-    NMDevicePrivate *   priv = NM_DEVICE_GET_PRIVATE(self);
-    struct in6_addr     lladdr;
-    NMConnection *      connection;
-    NMSettingIP6Config *s_ip6 = NULL;
-    GError *            error = NULL;
-    const char *        addr_type;
-    char                sbuf[NM_UTILS_INET_ADDRSTRLEN];
-
-    if (!priv->ipv6ll_handle)
-        return;
-
-    if (priv->ext_ip6_config_captured
-        && nm_ip6_config_find_first_address(priv->ext_ip6_config_captured,
-                                            NM_PLATFORM_MATCH_WITH_ADDRTYPE_LINKLOCAL
-                                                | NM_PLATFORM_MATCH_WITH_ADDRSTATE_NORMAL
-                                                | NM_PLATFORM_MATCH_WITH_ADDRSTATE_TENTATIVE)) {
-        /* Already have an LL address, nothing to do */
-        return;
-    }
-
-    priv->ipv6ll_has = FALSE;
-    memset(&priv->ipv6ll_addr, 0, sizeof(priv->ipv6ll_addr));
-
-    memset(&lladdr, 0, sizeof(lladdr));
-    lladdr.s6_addr16[0] = htons(0xfe80);
-
-    connection = nm_device_get_applied_connection(self);
-    if (connection)
-        s_ip6 = NM_SETTING_IP6_CONFIG(nm_connection_get_setting_ip6_config(connection));
-
-    if (s_ip6
-        && nm_setting_ip6_config_get_addr_gen_mode(s_ip6)
-               == NM_SETTING_IP6_CONFIG_ADDR_GEN_MODE_STABLE_PRIVACY) {
-        NMUtilsStableType stable_type;
-        const char *      stable_id;
-
-        stable_id = _prop_get_connection_stable_id(self, connection, &stable_type);
-        if (!nm_utils_ipv6_addr_set_stable_privacy(stable_type,
-                                                   &lladdr,
-                                                   nm_device_get_iface(self),
-                                                   stable_id,
-                                                   priv->linklocal6_dad_counter++,
-                                                   &error)) {
-            _LOGW(LOGD_IP6, "linklocal6: failed to generate an address: %s", error->message);
-            g_clear_error(&error);
-            linklocal6_failed(self);
-            return;
-        }
-        addr_type = "stable-privacy";
-    } else {
-        NMUtilsIPv6IfaceId iid;
-
-        if (priv->linklocal6_timeout_id) {
-            /* We already started and attempt to add a LL address. For the EUI-64
-             * mode we can't pick a new one, we'll just fail. */
-            _LOGW(LOGD_IP6, "linklocal6: DAD failed for an EUI-64 address");
-            linklocal6_failed(self);
-            return;
-        }
-
-        if (!nm_device_get_ip_iface_identifier(self, &iid, TRUE)) {
-            _LOGW(LOGD_IP6, "linklocal6: failed to get interface identifier; IPv6 cannot continue");
-            return;
-        }
-        nm_utils_ipv6_addr_set_interface_identifier(&lladdr, iid);
-        addr_type = "EUI-64";
-    }
-
-    _LOGD(LOGD_IP6,
-          "linklocal6: generated %s IPv6LL address %s",
-          addr_type,
-          _nm_utils_inet6_ntop(&lladdr, sbuf));
-    priv->ipv6ll_has  = TRUE;
-    priv->ipv6ll_addr = lladdr;
-    ip_config_merge_and_apply(self, AF_INET6, TRUE);
-}
-
-static gboolean
-linklocal6_start(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    nm_clear_g_source(&priv->linklocal6_timeout_id);
-
-    if (priv->ext_ip6_config_captured
-        && nm_ip6_config_find_first_address(priv->ext_ip6_config_captured,
-                                            NM_PLATFORM_MATCH_WITH_ADDRTYPE_LINKLOCAL
-                                                | NM_PLATFORM_MATCH_WITH_ADDRSTATE_NORMAL))
-        return TRUE;
-
-    _LOGD(LOGD_DEVICE,
-          "linklocal6: starting IPv6 with method '%s', but the device has no link-local addresses "
-          "configured. Wait.",
-          nm_device_get_effective_ip_config_method(self, AF_INET6));
-
-    check_and_add_ipv6ll_addr(self);
-
-    /* Depending on the network and what the 'dad_transmits' and 'retrans_time_ms'
-     * sysctl values are, DAD for the IPv6LL address may take quite a while.
-     * FIXME: use dad/retrans sysctl values if they are higher than a minimum time.
-     * (rh #1101809)
-     */
-    priv->linklocal6_timeout_id = g_timeout_add_seconds(15, linklocal6_timeout_cb, self);
-    return FALSE;
-}
-
-/*****************************************************************************/
-
-gint64
-nm_device_get_configured_mtu_from_connection_default(NMDevice *  self,
-                                                     const char *property_name,
-                                                     guint32     max_mtu)
-{
-    return nm_config_data_get_connection_default_int64(NM_CONFIG_GET_DATA,
-                                                       property_name,
-                                                       self,
-                                                       0,
-                                                       max_mtu,
-                                                       -1);
-}
-
-guint32
-nm_device_get_configured_mtu_from_connection(NMDevice *         self,
-                                             GType              setting_type,
-                                             NMDeviceMtuSource *out_source)
-{
-    const char *  global_property_name;
-    NMConnection *connection;
-    NMSetting *   setting;
-    gint64        mtu_default;
-    guint32       mtu     = 0;
-    guint32       max_mtu = G_MAXUINT32;
-
-    nm_assert(NM_IS_DEVICE(self));
-    nm_assert(out_source);
-
-    connection = nm_device_get_applied_connection(self);
-    if (!connection)
-        g_return_val_if_reached(0);
-
-    setting = nm_connection_get_setting(connection, setting_type);
-
-    if (setting_type == NM_TYPE_SETTING_WIRED) {
-        if (setting)
-            mtu = nm_setting_wired_get_mtu(NM_SETTING_WIRED(setting));
-        global_property_name = NM_CON_DEFAULT("ethernet.mtu");
-    } else if (setting_type == NM_TYPE_SETTING_WIRELESS) {
-        if (setting)
-            mtu = nm_setting_wireless_get_mtu(NM_SETTING_WIRELESS(setting));
-        global_property_name = NM_CON_DEFAULT("wifi.mtu");
-    } else if (setting_type == NM_TYPE_SETTING_INFINIBAND) {
-        if (setting)
-            mtu = nm_setting_infiniband_get_mtu(NM_SETTING_INFINIBAND(setting));
-        global_property_name = NM_CON_DEFAULT("infiniband.mtu");
-        max_mtu              = NM_INFINIBAND_MAX_MTU;
-    } else if (setting_type == NM_TYPE_SETTING_IP_TUNNEL) {
-        if (setting)
-            mtu = nm_setting_ip_tunnel_get_mtu(NM_SETTING_IP_TUNNEL(setting));
-        global_property_name = NM_CON_DEFAULT("ip-tunnel.mtu");
-    } else if (setting_type == NM_TYPE_SETTING_WIREGUARD) {
-        if (setting)
-            mtu = nm_setting_wireguard_get_mtu(NM_SETTING_WIREGUARD(setting));
-        global_property_name = NM_CON_DEFAULT("wireguard.mtu");
-    } else
-        g_return_val_if_reached(0);
-
-    if (mtu) {
-        *out_source = NM_DEVICE_MTU_SOURCE_CONNECTION;
-        return mtu;
-    }
-
-    mtu_default =
-        nm_device_get_configured_mtu_from_connection_default(self, global_property_name, max_mtu);
-    if (mtu_default >= 0) {
-        *out_source = NM_DEVICE_MTU_SOURCE_CONNECTION;
-        return (guint32) mtu_default;
-    }
-
-    *out_source = NM_DEVICE_MTU_SOURCE_NONE;
-    return 0;
-}
-
-guint32
-nm_device_get_configured_mtu_for_wired(NMDevice *         self,
-                                       NMDeviceMtuSource *out_source,
-                                       gboolean *         out_force)
-{
-    return nm_device_get_configured_mtu_from_connection(self, NM_TYPE_SETTING_WIRED, out_source);
-}
-
-guint32
-nm_device_get_configured_mtu_wired_parent(NMDevice *         self,
-                                          NMDeviceMtuSource *out_source,
-                                          gboolean *         out_force)
-{
-    guint32 mtu        = 0;
-    guint32 parent_mtu = 0;
-    int     ifindex;
-
-    ifindex = nm_device_parent_get_ifindex(self);
-    if (ifindex > 0) {
-        parent_mtu = nm_platform_link_get_mtu(nm_device_get_platform(self), ifindex);
-        if (parent_mtu >= NM_DEVICE_GET_CLASS(self)->mtu_parent_delta)
-            parent_mtu -= NM_DEVICE_GET_CLASS(self)->mtu_parent_delta;
-        else
-            parent_mtu = 0;
-    }
-
-    mtu = nm_device_get_configured_mtu_for_wired(self, out_source, NULL);
-
-    if (parent_mtu && mtu > parent_mtu) {
-        /* Trying to set a MTU that is out of range from configuration:
-         * fall back to the parent MTU and set force flag so that it
-         * overrides an MTU with higher priority already configured.
-         */
-        *out_source = NM_DEVICE_MTU_SOURCE_PARENT;
-        *out_force  = TRUE;
-        return parent_mtu;
-    }
-
-    if (*out_source != NM_DEVICE_MTU_SOURCE_NONE) {
-        nm_assert(mtu > 0);
-        return mtu;
-    }
-
-    /* Inherit the MTU from parent device, if any */
-    if (parent_mtu) {
-        mtu         = parent_mtu;
-        *out_source = NM_DEVICE_MTU_SOURCE_PARENT;
-    }
-
-    return mtu;
-}
-
-/*****************************************************************************/
-
-static void
-_set_mtu(NMDevice *self, guint32 mtu)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->mtu == mtu)
-        return;
-
-    priv->mtu = mtu;
-    _notify(self, PROP_MTU);
-
-    if (priv->master) {
-        /* changing the MTU of a slave, might require the master to reset
-         * its MTU. Note that the master usually cannot set a MTU larger
-         * then the slave's. Hence, when the slave increases the MTU,
-         * master might want to retry setting the MTU. */
-        nm_device_commit_mtu(priv->master);
-    }
-}
-
-static gboolean
-set_platform_mtu(NMDevice *self, guint32 mtu)
-{
-    int r;
-
-    r = nm_platform_link_set_mtu(nm_device_get_platform(self), nm_device_get_ip_ifindex(self), mtu);
-    return (r != -NME_PL_CANT_SET_MTU);
-}
-
-static void
-_commit_mtu(NMDevice *self, const NMIP4Config *config)
-{
-    NMDevicePrivate * priv   = NM_DEVICE_GET_PRIVATE(self);
-    NMDeviceMtuSource source = NM_DEVICE_MTU_SOURCE_NONE;
-    guint32           ip6_mtu, ip6_mtu_orig;
-    guint32           mtu_desired, mtu_desired_orig;
-    guint32           mtu_plat;
-    struct {
-        gboolean initialized;
-        guint32  value;
-    } ip6_mtu_sysctl = {
-        0,
-    };
-    int      ifindex;
-    char     sbuf[64], sbuf1[64], sbuf2[64];
-    gboolean success = TRUE;
-
-    ifindex = nm_device_get_ip_ifindex(self);
-    if (ifindex <= 0)
-        return;
-
-    if (!nm_device_get_applied_connection(self)
-        || nm_device_sys_iface_state_is_external_or_assume(self)) {
-        /* we don't tamper with the MTU of disconnected and
-         * external/assumed devices. */
-        return;
-    }
-
-    {
-        guint32  mtu   = 0;
-        gboolean force = FALSE;
-
-        /* We take the MTU from various sources: (in order of increasing
-         * priority) parent link, IP configuration (which contains the
-         * MTU from DHCP/PPP), connection profile.
-         *
-         * We could just compare it with the platform MTU and apply it
-         * when different, but this would revert at random times manual
-         * changes done by the user with the MTU from the connection.
-         *
-         * Instead, we remember the source of the currently configured
-         * MTU and apply the new one only when the new source has a
-         * higher priority, so that we don't set a MTU from same source
-         * multiple times. An exception to this is for the PARENT
-         * source, since we need to keep tracking the parent MTU when it
-         * changes.
-         *
-         * The subclass can set the @force argument to TRUE to signal that the
-         * returned MTU should be applied even if it has a lower priority. This
-         * is useful when the value from a lower source should
-         * preempt the one from higher ones.
-         */
-
-        if (NM_DEVICE_GET_CLASS(self)->get_configured_mtu)
-            mtu = NM_DEVICE_GET_CLASS(self)->get_configured_mtu(self, &source, &force);
-
-        if (config && !force && source < NM_DEVICE_MTU_SOURCE_IP_CONFIG
-            && nm_ip4_config_get_mtu(config)) {
-            mtu    = nm_ip4_config_get_mtu(config);
-            source = NM_DEVICE_MTU_SOURCE_IP_CONFIG;
-        }
-
-        if (mtu != 0) {
-            _LOGT(LOGD_DEVICE,
-                  "mtu: value %u from source '%s' (%u), current source '%s' (%u)%s",
-                  (guint) mtu,
-                  mtu_source_to_str(source),
-                  (guint) source,
-                  mtu_source_to_str(priv->mtu_source),
-                  (guint) priv->mtu_source,
-                  force ? " (forced)" : "");
-        }
-
-        if (mtu != 0
-            && (force || source > priv->mtu_source
-                || (priv->mtu_source == NM_DEVICE_MTU_SOURCE_PARENT && source == priv->mtu_source)))
-            mtu_desired = mtu;
-        else {
-            mtu_desired = 0;
-            source      = NM_DEVICE_MTU_SOURCE_NONE;
-        }
-    }
-
-    if (mtu_desired && mtu_desired < 1280) {
-        NMSettingIPConfig *s_ip6;
-
-        s_ip6 = nm_device_get_applied_setting(self, NM_TYPE_SETTING_IP6_CONFIG);
-        if (s_ip6
-            && !NM_IN_STRSET(nm_setting_ip_config_get_method(s_ip6),
-                             NM_SETTING_IP6_CONFIG_METHOD_IGNORE,
-                             NM_SETTING_IP6_CONFIG_METHOD_DISABLED)) {
-            /* the interface has IPv6 enabled. The MTU with IPv6 cannot be smaller
-             * then 1280.
-             *
-             * For slave-devices (that don't have @s_ip6 we) don't do this fixup because
-             * it's anyway an unsolved problem when the slave configures a conflicting
-             * MTU. */
-            mtu_desired = 1280;
-        }
-    }
-
-    ip6_mtu = priv->ip6_mtu;
-    if (!ip6_mtu && priv->mtu_source == NM_DEVICE_MTU_SOURCE_NONE) {
-        /* initially, if the IPv6 MTU is not specified, grow it as large as the
-         * link MTU @mtu_desired. Only exception is, if @mtu_desired is so small
-         * to disable IPv6. */
-        if (mtu_desired >= 1280)
-            ip6_mtu = mtu_desired;
-    }
-
-    if (!ip6_mtu && !mtu_desired)
-        return;
-
-    mtu_desired_orig = mtu_desired;
-    ip6_mtu_orig     = ip6_mtu;
-
-    mtu_plat = nm_platform_link_get_mtu(nm_device_get_platform(self), ifindex);
-
-    if (ip6_mtu) {
-        ip6_mtu = NM_MAX(1280, ip6_mtu);
-
-        if (!mtu_desired)
-            mtu_desired = mtu_plat;
-
-        if (mtu_desired) {
-            mtu_desired = NM_MAX(1280, mtu_desired);
-
-            if (mtu_desired < ip6_mtu)
-                ip6_mtu = mtu_desired;
-        }
-    }
-
-    if (mtu_desired && NM_DEVICE_GET_CLASS(self)->mtu_force_set && !priv->mtu_force_set_done) {
-        priv->mtu_force_set_done = TRUE;
-
-        if (mtu_desired == mtu_plat) {
-            mtu_plat--;
-            if (NM_DEVICE_GET_CLASS(self)->set_platform_mtu(self, mtu_desired - 1)) {
-                _LOGD(LOGD_DEVICE, "mtu: force-set MTU to %u", mtu_desired - 1);
-            } else
-                _LOGW(LOGD_DEVICE, "mtu: failure to force-set MTU to %u", mtu_desired - 1);
-        }
-    }
-
-    _LOGT(LOGD_DEVICE,
-          "mtu: device-mtu: %u%s, ipv6-mtu: %u%s, ifindex: %d",
-          (guint) mtu_desired,
-          mtu_desired == mtu_desired_orig
-              ? ""
-              : nm_sprintf_buf(sbuf1, " (was %u)", (guint) mtu_desired_orig),
-          (guint) ip6_mtu,
-          ip6_mtu == ip6_mtu_orig ? "" : nm_sprintf_buf(sbuf2, " (was %u)", (guint) ip6_mtu_orig),
-          ifindex);
-
-#define _IP6_MTU_SYS()                                                                         \
-    ({                                                                                         \
-        if (!ip6_mtu_sysctl.initialized) {                                                     \
-            ip6_mtu_sysctl.value       = nm_device_sysctl_ip_conf_get_int_checked(self,        \
-                                                                            AF_INET6,    \
-                                                                            "mtu",       \
-                                                                            10,          \
-                                                                            0,           \
-                                                                            G_MAXUINT32, \
-                                                                            0);          \
-            ip6_mtu_sysctl.initialized = TRUE;                                                 \
-        }                                                                                      \
-        ip6_mtu_sysctl.value;                                                                  \
-    })
-    if ((mtu_desired && mtu_desired != mtu_plat) || (ip6_mtu && ip6_mtu != _IP6_MTU_SYS())) {
-        gboolean anticipated_failure = FALSE;
-
-        if (!priv->mtu_initial && !priv->ip6_mtu_initial) {
-            /* before touching any of the MTU parameters, record the
-             * original setting to restore on deactivation. */
-            priv->mtu_initial     = mtu_plat;
-            priv->ip6_mtu_initial = _IP6_MTU_SYS();
-        }
-
-        if (mtu_desired && mtu_desired != mtu_plat) {
-            if (!NM_DEVICE_GET_CLASS(self)->set_platform_mtu(self, mtu_desired)) {
-                anticipated_failure = TRUE;
-                success             = FALSE;
-                _LOGW(LOGD_DEVICE,
-                      "mtu: failure to set MTU. %s",
-                      NM_IS_DEVICE_VLAN(self)
-                          ? "Is the parent's MTU size large enough?"
-                          : (!c_list_is_empty(&priv->slaves)
-                                 ? "Are the MTU sizes of the slaves large enough?"
-                                 : "Did you configure the MTU correctly?"));
-            }
-            priv->carrier_wait_until_ms =
-                nm_utils_get_monotonic_timestamp_msec() + CARRIER_WAIT_TIME_AFTER_MTU_MS;
-        }
-
-        if (ip6_mtu && ip6_mtu != _IP6_MTU_SYS()) {
-            if (!nm_device_sysctl_ip_conf_set(self,
-                                              AF_INET6,
-                                              "mtu",
-                                              nm_sprintf_buf(sbuf, "%u", (unsigned) ip6_mtu))) {
-                int         errsv = errno;
-                NMLogLevel  level = LOGL_WARN;
-                const char *msg   = NULL;
-
-                success = FALSE;
-
-                if (anticipated_failure && errsv == EINVAL) {
-                    level = LOGL_DEBUG;
-                    msg   = "Is the underlying MTU value successfully set?";
-                } else if (!g_file_test("/proc/sys/net/ipv6", G_FILE_TEST_IS_DIR)) {
-                    level   = LOGL_DEBUG;
-                    msg     = "IPv6 is disabled";
-                    success = TRUE;
-                }
-
-                _NMLOG(level,
-                       LOGD_DEVICE,
-                       "mtu: failure to set IPv6 MTU%s%s",
-                       msg ? ": " : "",
-                       msg ?: "");
-            }
-            priv->carrier_wait_until_ms =
-                nm_utils_get_monotonic_timestamp_msec() + CARRIER_WAIT_TIME_AFTER_MTU_MS;
-        }
-    }
-
-    if (success && source != NM_DEVICE_MTU_SOURCE_NONE)
-        priv->mtu_source = source;
-
-#undef _IP6_MTU_SYS
-}
-
-void
-nm_device_commit_mtu(NMDevice *self)
-{
-    NMDeviceState state;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    state = nm_device_get_state(self);
-    if (state >= NM_DEVICE_STATE_CONFIG && state < NM_DEVICE_STATE_DEACTIVATING) {
-        _LOGT(LOGD_DEVICE, "mtu: commit-mtu...");
-        _commit_mtu(self, NM_DEVICE_GET_PRIVATE(self)->ip_config_4);
-    } else
-        _LOGT(LOGD_DEVICE,
-              "mtu: commit-mtu... skip due to state %s",
-              nm_device_state_to_str(state));
-}
-
-static void
-ndisc_config_changed(NMNDisc *ndisc, const NMNDiscData *rdata, guint changed_int, NMDevice *self)
-{
-    NMNDiscConfigMap changed = changed_int;
-    NMDevicePrivate *priv    = NM_DEVICE_GET_PRIVATE(self);
-    guint            i;
-
-    g_return_if_fail(priv->act_request.obj);
-
-    if (!applied_config_get_current(&priv->ac_ip6_config))
-        applied_config_init_new(&priv->ac_ip6_config, self, AF_INET6);
-
-    if (changed & NM_NDISC_CONFIG_ADDRESSES) {
-        guint8  plen;
-        guint32 ifa_flags;
-
-        /* Check, whether kernel is recent enough to help user space handling RA.
-         * If it's not supported, we have no ipv6-privacy and must add autoconf
-         * addresses as /128. The reason for the /128 is to prevent the kernel
-         * from adding a prefix route for this address. */
-        ifa_flags = 0;
-        if (nm_platform_kernel_support_get(NM_PLATFORM_KERNEL_SUPPORT_TYPE_EXTENDED_IFA_FLAGS)) {
-            ifa_flags |= IFA_F_NOPREFIXROUTE;
-            if (NM_IN_SET(priv->ndisc_use_tempaddr,
-                          NM_SETTING_IP6_CONFIG_PRIVACY_PREFER_TEMP_ADDR,
-                          NM_SETTING_IP6_CONFIG_PRIVACY_PREFER_PUBLIC_ADDR))
-                ifa_flags |= IFA_F_MANAGETEMPADDR;
-            plen = 64;
-        } else
-            plen = 128;
-
-        nm_ip6_config_reset_addresses_ndisc((NMIP6Config *) priv->ac_ip6_config.orig,
-                                            rdata->addresses,
-                                            rdata->addresses_n,
-                                            plen,
-                                            ifa_flags);
-        if (priv->ac_ip6_config.current) {
-            nm_ip6_config_reset_addresses_ndisc((NMIP6Config *) priv->ac_ip6_config.current,
-                                                rdata->addresses,
-                                                rdata->addresses_n,
-                                                plen,
-                                                ifa_flags);
-        }
-    }
-
-    if (NM_FLAGS_ANY(changed, NM_NDISC_CONFIG_ROUTES | NM_NDISC_CONFIG_GATEWAYS)) {
-        nm_ip6_config_reset_routes_ndisc(
-            (NMIP6Config *) priv->ac_ip6_config.orig,
-            rdata->gateways,
-            rdata->gateways_n,
-            rdata->routes,
-            rdata->routes_n,
-            nm_device_get_route_table(self, AF_INET6),
-            nm_device_get_route_metric(self, AF_INET6),
-            nm_platform_kernel_support_get(NM_PLATFORM_KERNEL_SUPPORT_TYPE_RTA_PREF));
-        if (priv->ac_ip6_config.current) {
-            nm_ip6_config_reset_routes_ndisc(
-                (NMIP6Config *) priv->ac_ip6_config.current,
-                rdata->gateways,
-                rdata->gateways_n,
-                rdata->routes,
-                rdata->routes_n,
-                nm_device_get_route_table(self, AF_INET6),
-                nm_device_get_route_metric(self, AF_INET6),
-                nm_platform_kernel_support_get(NM_PLATFORM_KERNEL_SUPPORT_TYPE_RTA_PREF));
-        }
-    }
-
-    if (changed & NM_NDISC_CONFIG_DNS_SERVERS) {
-        /* Rebuild DNS server list from neighbor discovery cache. */
-        applied_config_reset_nameservers(&priv->ac_ip6_config);
-
-        for (i = 0; i < rdata->dns_servers_n; i++)
-            applied_config_add_nameserver(&priv->ac_ip6_config,
-                                          (const NMIPAddr *) &rdata->dns_servers[i].address);
-    }
-
-    if (changed & NM_NDISC_CONFIG_DNS_DOMAINS) {
-        /* Rebuild domain list from neighbor discovery cache. */
-        applied_config_reset_searches(&priv->ac_ip6_config);
-
-        for (i = 0; i < rdata->dns_domains_n; i++)
-            applied_config_add_search(&priv->ac_ip6_config, rdata->dns_domains[i].domain);
-    }
-
-    if (changed & NM_NDISC_CONFIG_DHCP_LEVEL) {
-        dhcp6_cleanup(self, CLEANUP_TYPE_DECONFIGURE, TRUE);
-
-        priv->dhcp6.mode = rdata->dhcp_level;
-        if (priv->dhcp6.mode != NM_NDISC_DHCP_LEVEL_NONE) {
-            _LOGD(LOGD_DEVICE | LOGD_DHCP6,
-                  "Activation: Stage 3 of 5 (IP Configure Start) starting DHCPv6"
-                  " as requested by IPv6 router...");
-            if (!dhcp6_start(self, FALSE)) {
-                if (priv->dhcp6.mode == NM_NDISC_DHCP_LEVEL_MANAGED) {
-                    nm_device_state_changed(self,
-                                            NM_DEVICE_STATE_FAILED,
-                                            NM_DEVICE_STATE_REASON_DHCP_START_FAILED);
-                    return;
-                }
-            }
-        }
-    }
-
-    if (changed & NM_NDISC_CONFIG_HOP_LIMIT)
-        nm_platform_sysctl_ip_conf_set_ipv6_hop_limit_safe(nm_device_get_platform(self),
-                                                           nm_device_get_ip_iface(self),
-                                                           rdata->hop_limit);
-
-    if (changed & NM_NDISC_CONFIG_REACHABLE_TIME) {
-        nm_platform_sysctl_ip_neigh_set_ipv6_reachable_time(nm_device_get_platform(self),
-                                                            nm_device_get_ip_iface(self),
-                                                            rdata->reachable_time_ms);
-    }
-
-    if (changed & NM_NDISC_CONFIG_RETRANS_TIMER) {
-        nm_platform_sysctl_ip_neigh_set_ipv6_retrans_time(nm_device_get_platform(self),
-                                                          nm_device_get_ip_iface(self),
-                                                          rdata->retrans_timer_ms);
-    }
-
-    if (changed & NM_NDISC_CONFIG_MTU) {
-        if (priv->ip6_mtu != rdata->mtu) {
-            _LOGD(LOGD_DEVICE, "mtu: set IPv6 MTU to %u", (guint) rdata->mtu);
-            priv->ip6_mtu = rdata->mtu;
-        }
-    }
-
-    nm_device_activate_schedule_ip_config_result(self, AF_INET6, NULL);
-}
-
-static void
-ndisc_ra_timeout(NMNDisc *ndisc, NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    /* We don't want to stop listening for router advertisements completely,
-     * but instead let device activation continue activating.  If an RA
-     * shows up later, we'll use it as long as the device is not disconnected.
-     */
-
-    _LOGD(LOGD_IP6, "timed out waiting for IPv6 router advertisement");
-    if (priv->ip_state_6 == NM_DEVICE_IP_STATE_CONF) {
-        /* If RA is our only source of addressing information and we don't
-         * ever receive one, then time out IPv6.  But if there is other
-         * IPv6 configuration, like manual IPv6 addresses or external IPv6
-         * config, consider that sufficient for IPv6 success.
-         *
-         * FIXME: it doesn't seem correct to determine this based on which
-         *        addresses we find inside priv->ip_config_6.
-         */
-        if (priv->ip_config_6
-            && nm_ip6_config_find_first_address(priv->ip_config_6,
-                                                NM_PLATFORM_MATCH_WITH_ADDRTYPE_NORMAL
-                                                    | NM_PLATFORM_MATCH_WITH_ADDRSTATE__ANY))
-            nm_device_activate_schedule_ip_config_result(self, AF_INET6, NULL);
-        else
-            nm_device_activate_schedule_ip_config_timeout(self, AF_INET6);
-    }
-}
-
-static void
-addrconf6_start_with_link_ready(NMDevice *self)
-{
-    NMDevicePrivate *  priv = NM_DEVICE_GET_PRIVATE(self);
-    NMUtilsIPv6IfaceId iid;
-
-    g_assert(priv->ndisc);
-
-    if (nm_device_get_ip_iface_identifier(self, &iid, FALSE)) {
-        _LOGD(LOGD_IP6, "addrconf6: using the device EUI-64 identifier");
-        nm_ndisc_set_iid(priv->ndisc, iid);
-    } else {
-        /* Don't abort the addrconf at this point -- if ndisc needs the iid
-         * it will notice this itself. */
-        _LOGI(LOGD_IP6, "addrconf6: no interface identifier; IPv6 address creation may fail");
-    }
-
-    /* Apply any manual configuration before starting RA */
-    if (!ip_config_merge_and_apply(self, AF_INET6, TRUE))
-        _LOGW(LOGD_IP6, "failed to apply manual IPv6 configuration");
-
-    if (nm_ndisc_get_node_type(priv->ndisc) == NM_NDISC_NODE_TYPE_ROUTER) {
-        nm_device_sysctl_ip_conf_set(self, AF_INET6, "forwarding", "1");
-        nm_device_activate_schedule_ip_config_result(self, AF_INET6, NULL);
-        priv->needs_ip6_subnet = TRUE;
-        g_signal_emit(self, signals[IP6_SUBNET_NEEDED], 0);
-    }
-
-    priv->ndisc_changed_id = g_signal_connect(priv->ndisc,
-                                              NM_NDISC_CONFIG_RECEIVED,
-                                              G_CALLBACK(ndisc_config_changed),
-                                              self);
-    priv->ndisc_timeout_id = g_signal_connect(priv->ndisc,
-                                              NM_NDISC_RA_TIMEOUT_SIGNAL,
-                                              G_CALLBACK(ndisc_ra_timeout),
-                                              self);
-
-    ndisc_set_router_config(priv->ndisc, self);
-    nm_ndisc_start(priv->ndisc);
-    priv->ndisc_started = TRUE;
-    return;
-}
-
-static gboolean
-addrconf6_start(NMDevice *self, NMSettingIP6ConfigPrivacy use_tempaddr)
-{
-    NMDevicePrivate *   priv = NM_DEVICE_GET_PRIVATE(self);
-    NMConnection *      connection;
-    NMSettingIP6Config *s_ip6 = NULL;
-    GError *            error = NULL;
-    NMUtilsStableType   stable_type;
-    const char *        stable_id;
-    NMNDiscNodeType     node_type;
-    int                 max_addresses;
-    int                 router_solicitations;
-    int                 router_solicitation_interval;
-    guint32             ra_timeout;
-    guint32             default_ra_timeout;
-
-    connection = nm_device_get_applied_connection(self);
-    g_assert(connection);
-
-    nm_assert(!applied_config_get_current(&priv->ac_ip6_config));
-    applied_config_clear(&priv->ac_ip6_config);
-
-    nm_clear_pointer(&priv->rt6_temporary_not_available, g_hash_table_unref);
-    nm_clear_g_source(&priv->rt6_temporary_not_available_id);
-
-    s_ip6 = NM_SETTING_IP6_CONFIG(nm_connection_get_setting_ip6_config(connection));
-    g_assert(s_ip6);
-
-    if (nm_streq(nm_device_get_effective_ip_config_method(self, AF_INET6),
-                 NM_SETTING_IP4_CONFIG_METHOD_SHARED))
-        node_type = NM_NDISC_NODE_TYPE_ROUTER;
-    else
-        node_type = NM_NDISC_NODE_TYPE_HOST;
-
-    nm_lndp_ndisc_get_sysctl(nm_device_get_platform(self),
-                             nm_device_get_ip_iface(self),
-                             &max_addresses,
-                             &router_solicitations,
-                             &router_solicitation_interval,
-                             &default_ra_timeout);
-
-    if (node_type == NM_NDISC_NODE_TYPE_ROUTER)
-        ra_timeout = 0u;
-    else {
-        ra_timeout = _prop_get_ipv6_ra_timeout(self);
-        if (ra_timeout == 0u)
-            ra_timeout = default_ra_timeout;
-    }
-
-    stable_id   = _prop_get_connection_stable_id(self, connection, &stable_type);
-    priv->ndisc = nm_lndp_ndisc_new(nm_device_get_platform(self),
-                                    nm_device_get_ip_ifindex(self),
-                                    nm_device_get_ip_iface(self),
-                                    stable_type,
-                                    stable_id,
-                                    nm_setting_ip6_config_get_addr_gen_mode(s_ip6),
-                                    node_type,
-                                    max_addresses,
-                                    router_solicitations,
-                                    router_solicitation_interval,
-                                    ra_timeout,
-                                    &error);
-    if (!priv->ndisc) {
-        _LOGE(LOGD_IP6, "addrconf6: failed to start neighbor discovery: %s", error->message);
-        g_error_free(error);
-        return FALSE;
-    }
-
-    priv->ndisc_use_tempaddr = use_tempaddr;
-
-    if (NM_IN_SET(use_tempaddr,
-                  NM_SETTING_IP6_CONFIG_PRIVACY_PREFER_TEMP_ADDR,
-                  NM_SETTING_IP6_CONFIG_PRIVACY_PREFER_PUBLIC_ADDR)
-        && !nm_platform_kernel_support_get(NM_PLATFORM_KERNEL_SUPPORT_TYPE_EXTENDED_IFA_FLAGS)) {
-        _LOGW(LOGD_IP6,
-              "The kernel does not support extended IFA_FLAGS needed by NM for "
-              "IPv6 private addresses. This feature is not available");
-    }
-
-    /* ensure link local is ready... */
-    if (!linklocal6_start(self)) {
-        /* wait for the LL address to show up */
-        return TRUE;
-    }
-
-    /* already have the LL address; kick off neighbor discovery */
-    addrconf6_start_with_link_ready(self);
-    return TRUE;
-}
-
-static void
-addrconf6_cleanup(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    priv->ndisc_started = FALSE;
-    nm_clear_g_signal_handler(priv->ndisc, &priv->ndisc_changed_id);
-    nm_clear_g_signal_handler(priv->ndisc, &priv->ndisc_timeout_id);
-
-    applied_config_clear(&priv->ac_ip6_config);
-    nm_clear_pointer(&priv->rt6_temporary_not_available, g_hash_table_unref);
-    nm_clear_g_source(&priv->rt6_temporary_not_available_id);
-    if (priv->ndisc) {
-        nm_ndisc_stop(priv->ndisc);
-        g_clear_object(&priv->ndisc);
-    }
-}
-
-/*****************************************************************************/
-
-static void
-save_ip6_properties(NMDevice *self)
-{
-    static const char *const ip6_properties_to_save[] = {
-        "accept_ra",
-        "forwarding",
-        "disable_ipv6",
-        "hop_limit",
-        "use_tempaddr",
-    };
-    NMDevicePrivate *priv     = NM_DEVICE_GET_PRIVATE(self);
-    NMPlatform *     platform = nm_device_get_platform(self);
-    const char *     ifname;
-    char *           value;
-    int              i;
-
-    g_hash_table_remove_all(priv->ip6_saved_properties);
-
-    ifname = nm_device_get_ip_iface_from_platform(self);
-    if (!ifname)
-        return;
-
-    for (i = 0; i < G_N_ELEMENTS(ip6_properties_to_save); i++) {
-        value =
-            nm_platform_sysctl_ip_conf_get(platform, AF_INET6, ifname, ip6_properties_to_save[i]);
-        if (value) {
-            g_hash_table_insert(priv->ip6_saved_properties,
-                                (char *) ip6_properties_to_save[i],
-                                value);
-        }
-    }
-}
-
-static void
-restore_ip6_properties(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    GHashTableIter   iter;
-    gpointer         key, value;
-
-    g_hash_table_iter_init(&iter, priv->ip6_saved_properties);
-    while (g_hash_table_iter_next(&iter, &key, &value)) {
-        /* Don't touch "disable_ipv6" if we're doing userland IPv6LL */
-        if (priv->ipv6ll_handle && nm_streq(key, "disable_ipv6"))
-            continue;
-        nm_device_sysctl_ip_conf_set(self, AF_INET6, key, value);
-    }
-}
-
-static void
-set_disable_ipv6(NMDevice *self, const char *value)
-{
-    /* We only touch disable_ipv6 when NM is not managing the IPv6LL address */
-    if (!NM_DEVICE_GET_PRIVATE(self)->ipv6ll_handle)
-        nm_device_sysctl_ip_conf_set(self, AF_INET6, "disable_ipv6", value);
-}
-
-static void
-set_nm_ipv6ll(NMDevice *self, gboolean enable)
-{
-    NMDevicePrivate *priv    = NM_DEVICE_GET_PRIVATE(self);
-    int              ifindex = nm_device_get_ip_ifindex(self);
-
-    if (!nm_platform_kernel_support_get(NM_PLATFORM_KERNEL_SUPPORT_TYPE_USER_IPV6LL))
-        return;
-
-    priv->ipv6ll_handle = enable;
-    if (ifindex > 0) {
-        const char *detail = enable ? "enable" : "disable";
-        int         r;
-
-        _LOGD(LOGD_IP6, "will %s userland IPv6LL", detail);
-        r = nm_platform_link_set_user_ipv6ll_enabled(nm_device_get_platform(self), ifindex, enable);
-        if (r < 0) {
-            _NMLOG(NM_IN_SET(r, -NME_PL_NOT_FOUND, -NME_PL_OPNOTSUPP) ? LOGL_DEBUG : LOGL_WARN,
-                   LOGD_IP6,
-                   "failed to %s userspace IPv6LL address handling (%s)",
-                   detail,
-                   nm_strerror(r));
-        }
-
-        if (enable) {
-            gs_free char *value = NULL;
-
-            /* Bounce IPv6 to ensure the kernel stops IPv6LL address generation */
-            value = nm_device_sysctl_ip_conf_get(self, AF_INET6, "disable_ipv6");
-            if (nm_streq0(value, "0"))
-                nm_device_sysctl_ip_conf_set(self, AF_INET6, "disable_ipv6", "1");
-
-            /* Ensure IPv6 is enabled */
-            nm_device_sysctl_ip_conf_set(self, AF_INET6, "disable_ipv6", "0");
-        }
-    }
-}
-
-/*****************************************************************************/
-
-static gboolean
-ip_requires_slaves(NMDevice *self, int addr_family)
-{
-    const char *method;
-
-    method = nm_device_get_effective_ip_config_method(self, addr_family);
-
-    if (addr_family == AF_INET)
-        return nm_streq(method, NM_SETTING_IP4_CONFIG_METHOD_AUTO);
-
-    /* SLAAC, DHCP, and Link-Local depend on connectivity (and thus slaves)
-     * to complete addressing.  SLAAC and DHCP need a peer to provide a prefix.
-     */
-    return NM_IN_STRSET(method,
-                        NM_SETTING_IP6_CONFIG_METHOD_AUTO,
-                        NM_SETTING_IP6_CONFIG_METHOD_DHCP);
-}
-
-static NMActStageReturn
-act_stage3_ip_config_start(NMDevice *           self,
-                           int                  addr_family,
-                           gpointer *           out_config,
-                           NMDeviceStateReason *out_failure_reason)
-{
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-    NMDevicePrivate *priv    = NM_DEVICE_GET_PRIVATE(self);
-    NMConnection *   connection;
-    NMActStageReturn ret = NM_ACT_STAGE_RETURN_FAILURE;
-    const char *     method;
-
-    nm_assert_addr_family(addr_family);
-
-    connection = nm_device_get_applied_connection(self);
-
-    g_return_val_if_fail(connection, NM_ACT_STAGE_RETURN_FAILURE);
-
-    if (connection_ip_method_requires_carrier(connection, addr_family, NULL)
-        && nm_device_is_master(self) && !priv->carrier) {
-        _LOGI(LOGD_IP | LOGD_DEVICE,
-              "IPv%c config waiting until carrier is on",
-              nm_utils_addr_family_to_char(addr_family));
-        return NM_ACT_STAGE_RETURN_IP_WAIT;
-    }
-
-    if (nm_device_is_master(self) && ip_requires_slaves(self, addr_family)) {
-        /* If the master has no ready slaves, and depends on slaves for
-         * a successful IP configuration attempt, then postpone IP addressing.
-         */
-        if (!have_any_ready_slaves(self)) {
-            _LOGI(LOGD_DEVICE | LOGD_IP,
-                  "IPv%c config waiting until slaves are ready",
-                  nm_utils_addr_family_to_char(addr_family));
-            return NM_ACT_STAGE_RETURN_IP_WAIT;
-        }
-    }
-
-    if (!IS_IPv4)
-        priv->dhcp6.mode = NM_NDISC_DHCP_LEVEL_NONE;
-
-    method = nm_device_get_effective_ip_config_method(self, addr_family);
-
-    _LOGD(LOGD_IP | LOGD_DEVICE,
-          "IPv%c config method is %s",
-          nm_utils_addr_family_to_char(addr_family),
-          method);
-
-    if (IS_IPv4) {
-        if (NM_IN_STRSET(method,
-                         NM_SETTING_IP4_CONFIG_METHOD_AUTO,
-                         NM_SETTING_IP4_CONFIG_METHOD_MANUAL)) {
-            NMSettingIPConfig *s_ip4;
-            NMIP4Config **     configs, *config;
-            guint              num_addresses;
-
-            s_ip4 = nm_connection_get_setting_ip4_config(connection);
-            g_return_val_if_fail(s_ip4, NM_ACT_STAGE_RETURN_FAILURE);
-            num_addresses = nm_setting_ip_config_get_num_addresses(s_ip4);
-
-            if (nm_streq(method, NM_SETTING_IP4_CONFIG_METHOD_AUTO)) {
-                ret = dhcp4_start(self);
-                if (ret == NM_ACT_STAGE_RETURN_FAILURE) {
-                    NM_SET_OUT(out_failure_reason, NM_DEVICE_STATE_REASON_DHCP_START_FAILED);
-                    return ret;
-                }
-            } else {
-                g_return_val_if_fail(num_addresses != 0, NM_ACT_STAGE_RETURN_FAILURE);
-                ret = NM_ACT_STAGE_RETURN_POSTPONE;
-            }
-
-            if (num_addresses) {
-                config = nm_device_ip4_config_new(self);
-                nm_ip4_config_merge_setting(config,
-                                            nm_connection_get_setting_ip4_config(connection),
-                                            NM_SETTING_CONNECTION_MDNS_DEFAULT,
-                                            NM_SETTING_CONNECTION_LLMNR_DEFAULT,
-                                            nm_device_get_route_table(self, AF_INET),
-                                            nm_device_get_route_metric(self, AF_INET));
-                configs    = g_new0(NMIP4Config *, 2);
-                configs[0] = config;
-                ipv4_dad_start(self, configs, ipv4_manual_method_apply);
-            }
-        } else if (nm_streq(method, NM_SETTING_IP4_CONFIG_METHOD_LINK_LOCAL)) {
-            ret = ipv4ll_start(self);
-            if (ret == NM_ACT_STAGE_RETURN_FAILURE)
-                NM_SET_OUT(out_failure_reason, NM_DEVICE_STATE_REASON_AUTOIP_START_FAILED);
-        } else if (nm_streq(method, NM_SETTING_IP4_CONFIG_METHOD_SHARED)) {
-            if (out_config) {
-                *out_config = shared4_new_config(self, connection);
-                if (*out_config) {
-                    priv->dnsmasq_manager = nm_dnsmasq_manager_new(nm_device_get_ip_iface(self));
-                    ret                   = NM_ACT_STAGE_RETURN_SUCCESS;
-                } else {
-                    NM_SET_OUT(out_failure_reason, NM_DEVICE_STATE_REASON_IP_CONFIG_UNAVAILABLE);
-                    ret = NM_ACT_STAGE_RETURN_FAILURE;
-                }
-            } else
-                g_return_val_if_reached(NM_ACT_STAGE_RETURN_FAILURE);
-        } else if (nm_streq(method, NM_SETTING_IP4_CONFIG_METHOD_DISABLED))
-            ret = NM_ACT_STAGE_RETURN_SUCCESS;
-        else
-            _LOGW(LOGD_IP4, "unhandled IPv4 config method '%s'; will fail", method);
-
-        return ret;
-    } else {
-        NMSettingIP6ConfigPrivacy ip6_privacy     = NM_SETTING_IP6_CONFIG_PRIVACY_UNKNOWN;
-        const char *              ip6_privacy_str = "0";
-        NMPlatform *              platform;
-        int                       ifindex;
-
-        if (nm_streq(method, NM_SETTING_IP6_CONFIG_METHOD_DISABLED)) {
-            nm_device_sysctl_ip_conf_set(self, AF_INET6, "disable_ipv6", "1");
-            return NM_ACT_STAGE_RETURN_IP_DONE;
-        }
-
-        if (nm_streq(method, NM_SETTING_IP6_CONFIG_METHOD_IGNORE)) {
-            if (!nm_device_sys_iface_state_is_external(self)) {
-                if (priv->master) {
-                    /* If a device only has an IPv6 link-local address,
-                     * we don't generate an assumed connection. Therefore,
-                     * when a new slave connection (without IP configuration)
-                     * is activated on the device, the link-local address
-                     * remains configured. The IP configuration of an activated
-                     * slave should not depend on the previous state. Flush
-                     * addresses and routes on activation.
-                     */
-                    ifindex  = nm_device_get_ip_ifindex(self);
-                    platform = nm_device_get_platform(self);
-
-                    if (ifindex > 0) {
-                        gs_unref_object NMIP6Config *config = nm_device_ip6_config_new(self);
-
-                        nm_platform_ip_route_flush(platform, AF_INET6, ifindex);
-                        nm_platform_ip_address_flush(platform, AF_INET6, ifindex);
-                        nm_device_set_ip_config(self, AF_INET6, (NMIPConfig *) config, FALSE, NULL);
-                    }
-                } else {
-                    gboolean ipv6ll_handle_old = priv->ipv6ll_handle;
-
-                    /* When activating an IPv6 'ignore' connection we need to revert back
-                     * to kernel IPv6LL, but the kernel won't actually assign an address
-                     * to the interface until disable_ipv6 is bounced.
-                     */
-                    set_nm_ipv6ll(self, FALSE);
-                    if (ipv6ll_handle_old)
-                        nm_device_sysctl_ip_conf_set(self, AF_INET6, "disable_ipv6", "1");
-                    restore_ip6_properties(self);
-                }
-            }
-            return NM_ACT_STAGE_RETURN_IP_DONE;
-        }
-
-        /* Ensure the MTU makes sense. If it was below 1280 the kernel would not
-         * expose any ipv6 sysctls or allow presence of any addresses on the interface,
-         * including LL, which * would make it impossible to autoconfigure MTU to a
-         * correct value. */
-        _commit_mtu(self, priv->ip_config_4);
-
-        /* Any method past this point requires an IPv6LL address. Use NM-controlled
-         * IPv6LL if this is not an assumed connection, since assumed connections
-         * will already have IPv6 set up.
-         */
-        if (!nm_device_sys_iface_state_is_external_or_assume(self))
-            set_nm_ipv6ll(self, TRUE);
-
-        /* Re-enable IPv6 on the interface */
-        nm_device_sysctl_ip_conf_set(self, AF_INET6, "accept_ra", "0");
-        set_disable_ipv6(self, "0");
-
-        /* Synchronize external IPv6 configuration with kernel, since
-         * linklocal6_start() uses the information there to determine if we can
-         * proceed with the selected method (SLAAC, DHCP, link-local).
-         */
-        nm_platform_process_events(nm_device_get_platform(self));
-        g_clear_object(&priv->ext_ip6_config_captured);
-        priv->ext_ip6_config_captured =
-            nm_ip6_config_capture(nm_device_get_multi_index(self),
-                                  nm_device_get_platform(self),
-                                  nm_device_get_ip_ifindex(self),
-                                  NM_SETTING_IP6_CONFIG_PRIVACY_UNKNOWN);
-
-        ip6_privacy = _prop_get_ipv6_ip6_privacy(self);
-
-        if (NM_IN_STRSET(method,
-                         NM_SETTING_IP6_CONFIG_METHOD_AUTO,
-                         NM_SETTING_IP6_CONFIG_METHOD_SHARED)) {
-            if (!addrconf6_start(self, ip6_privacy)) {
-                /* IPv6 might be disabled; allow IPv4 to proceed */
-                ret = NM_ACT_STAGE_RETURN_IP_FAIL;
-            } else
-                ret = NM_ACT_STAGE_RETURN_POSTPONE;
-        } else if (nm_streq(method, NM_SETTING_IP6_CONFIG_METHOD_LINK_LOCAL)) {
-            ret =
-                linklocal6_start(self) ? NM_ACT_STAGE_RETURN_SUCCESS : NM_ACT_STAGE_RETURN_POSTPONE;
-        } else if (nm_streq(method, NM_SETTING_IP6_CONFIG_METHOD_DHCP)) {
-            priv->dhcp6.mode = NM_NDISC_DHCP_LEVEL_MANAGED;
-            if (!dhcp6_start(self, TRUE)) {
-                /* IPv6 might be disabled; allow IPv4 to proceed */
-                ret = NM_ACT_STAGE_RETURN_IP_FAIL;
-            } else
-                ret = NM_ACT_STAGE_RETURN_POSTPONE;
-        } else if (nm_streq(method, NM_SETTING_IP6_CONFIG_METHOD_MANUAL))
-            ret = NM_ACT_STAGE_RETURN_SUCCESS;
-        else
-            _LOGW(LOGD_IP6, "unhandled IPv6 config method '%s'; will fail", method);
-
-        if (ret != NM_ACT_STAGE_RETURN_FAILURE
-            && !nm_device_sys_iface_state_is_external_or_assume(self)) {
-            switch (ip6_privacy) {
-            case NM_SETTING_IP6_CONFIG_PRIVACY_UNKNOWN:
-            case NM_SETTING_IP6_CONFIG_PRIVACY_DISABLED:
-                ip6_privacy_str = "0";
-                break;
-            case NM_SETTING_IP6_CONFIG_PRIVACY_PREFER_PUBLIC_ADDR:
-                ip6_privacy_str = "1";
-                break;
-            case NM_SETTING_IP6_CONFIG_PRIVACY_PREFER_TEMP_ADDR:
-                ip6_privacy_str = "2";
-                break;
-            }
-            nm_device_sysctl_ip_conf_set(self, AF_INET6, "use_tempaddr", ip6_privacy_str);
-        }
-
-        return ret;
-    }
-}
-
-/**
- * nm_device_activate_stage3_ip4_start:
- * @self: the device
- *
- * Try starting IPv4 configuration.
- */
-gboolean
-nm_device_activate_stage3_ip4_start(NMDevice *self)
-{
-    NMDevicePrivate *   priv = NM_DEVICE_GET_PRIVATE(self);
-    NMActStageReturn    ret;
-    NMDeviceStateReason failure_reason      = NM_DEVICE_STATE_REASON_NONE;
-    gs_unref_object NMIP4Config *ip4_config = NULL;
-
-    g_assert(priv->ip_state_4 == NM_DEVICE_IP_STATE_WAIT);
-
-    if (nm_device_sys_iface_state_is_external(self)) {
-        _set_ip_state(self, AF_INET, NM_DEVICE_IP_STATE_DONE);
-        check_ip_state(self, FALSE, TRUE);
-        return TRUE;
-    }
-
-    _set_ip_state(self, AF_INET, NM_DEVICE_IP_STATE_CONF);
-    ret = NM_DEVICE_GET_CLASS(self)->act_stage3_ip_config_start(self,
-                                                                AF_INET,
-                                                                (gpointer *) &ip4_config,
-                                                                &failure_reason);
-    if (ret == NM_ACT_STAGE_RETURN_SUCCESS)
-        nm_device_activate_schedule_ip_config_result(self, AF_INET, NM_IP_CONFIG_CAST(ip4_config));
-    else if (ret == NM_ACT_STAGE_RETURN_IP_DONE) {
-        _set_ip_state(self, AF_INET, NM_DEVICE_IP_STATE_DONE);
-        check_ip_state(self, FALSE, TRUE);
-    } else if (ret == NM_ACT_STAGE_RETURN_FAILURE) {
-        nm_device_state_changed(self, NM_DEVICE_STATE_FAILED, failure_reason);
-        return FALSE;
-    } else if (ret == NM_ACT_STAGE_RETURN_IP_FAIL) {
-        /* Activation not wanted */
-        _set_ip_state(self, AF_INET, NM_DEVICE_IP_STATE_FAIL);
-    } else if (ret == NM_ACT_STAGE_RETURN_IP_WAIT) {
-        /* Wait for something to try IP config again */
-        _set_ip_state(self, AF_INET, NM_DEVICE_IP_STATE_WAIT);
-    } else
-        g_assert(ret == NM_ACT_STAGE_RETURN_POSTPONE);
-
-    return TRUE;
-}
-
-/**
- * nm_device_activate_stage3_ip6_start:
- * @self: the device
- *
- * Try starting IPv6 configuration.
- */
-gboolean
-nm_device_activate_stage3_ip6_start(NMDevice *self)
-{
-    NMDevicePrivate *   priv = NM_DEVICE_GET_PRIVATE(self);
-    NMActStageReturn    ret;
-    NMDeviceStateReason failure_reason      = NM_DEVICE_STATE_REASON_NONE;
-    gs_unref_object NMIP6Config *ip6_config = NULL;
-
-    g_assert(priv->ip_state_6 == NM_DEVICE_IP_STATE_WAIT);
-
-    if (nm_device_sys_iface_state_is_external(self)) {
-        _set_ip_state(self, AF_INET6, NM_DEVICE_IP_STATE_DONE);
-        check_ip_state(self, FALSE, TRUE);
-        return TRUE;
-    }
-
-    _set_ip_state(self, AF_INET6, NM_DEVICE_IP_STATE_CONF);
-    ret = NM_DEVICE_GET_CLASS(self)->act_stage3_ip_config_start(self,
-                                                                AF_INET6,
-                                                                (gpointer *) &ip6_config,
-                                                                &failure_reason);
-    if (ret == NM_ACT_STAGE_RETURN_SUCCESS) {
-        if (!ip6_config)
-            ip6_config = nm_device_ip6_config_new(self);
-        /* Here we get a static IPv6 config, like for Shared where it's
-         * autogenerated or from modems where it comes from ModemManager.
-         */
-        nm_assert(!applied_config_get_current(&priv->ac_ip6_config));
-        applied_config_init(&priv->ac_ip6_config, ip6_config);
-        nm_device_activate_schedule_ip_config_result(self, AF_INET6, NULL);
-    } else if (ret == NM_ACT_STAGE_RETURN_IP_DONE) {
-        _set_ip_state(self, AF_INET6, NM_DEVICE_IP_STATE_DONE);
-        check_ip_state(self, FALSE, TRUE);
-    } else if (ret == NM_ACT_STAGE_RETURN_FAILURE) {
-        nm_device_state_changed(self, NM_DEVICE_STATE_FAILED, failure_reason);
-        return FALSE;
-    } else if (ret == NM_ACT_STAGE_RETURN_IP_FAIL) {
-        /* Activation not wanted */
-        _set_ip_state(self, AF_INET6, NM_DEVICE_IP_STATE_FAIL);
-    } else if (ret == NM_ACT_STAGE_RETURN_IP_WAIT) {
-        /* Wait for something to try IP config again */
-        _set_ip_state(self, AF_INET6, NM_DEVICE_IP_STATE_WAIT);
-    } else
-        g_assert(ret == NM_ACT_STAGE_RETURN_POSTPONE);
-
-    return TRUE;
-}
-
-/*
- * activate_stage3_ip_config_start
- *
- * Begin automatic/manual IP configuration
- *
- */
-static void
-activate_stage3_ip_config_start(NMDevice *self)
-{
-    int ifindex;
-
-    _set_ip_state(self, AF_INET, NM_DEVICE_IP_STATE_WAIT);
-    _set_ip_state(self, AF_INET6, NM_DEVICE_IP_STATE_WAIT);
-
-    _active_connection_set_state_flags(self, NM_ACTIVATION_STATE_FLAG_LAYER2_READY);
-
-    nm_device_state_changed(self, NM_DEVICE_STATE_IP_CONFIG, NM_DEVICE_STATE_REASON_NONE);
-
-    /* Device should be up before we can do anything with it */
-    if ((ifindex = nm_device_get_ip_ifindex(self)) > 0
-        && !nm_platform_link_is_up(nm_device_get_platform(self), ifindex))
-        _LOGW(LOGD_DEVICE,
-              "interface %s not up for IP configuration",
-              nm_device_get_ip_iface(self));
-
-    /* IPv4 */
-    if (nm_device_activate_ip4_state_in_wait(self) && !nm_device_activate_stage3_ip4_start(self))
-        return;
-
-    /* IPv6 */
-    if (nm_device_activate_ip6_state_in_wait(self) && !nm_device_activate_stage3_ip6_start(self))
-        return;
-
-    /* Proxy */
-    nm_device_set_proxy_config(self, NULL);
-
-    check_ip_state(self, TRUE, TRUE);
-}
-
-static void
-fw_change_zone_cb(NMFirewallManager *      firewall_manager,
-                  NMFirewallManagerCallId *call_id,
-                  GError *                 error,
-                  gpointer                 user_data)
-{
-    NMDevice *       self = user_data;
-    NMDevicePrivate *priv;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->fw_call != call_id)
-        g_return_if_reached();
-
-    priv->fw_call = NULL;
-
-    if (nm_utils_error_is_cancelled(error))
-        return;
-
-    switch (priv->fw_state) {
-    case FIREWALL_STATE_WAIT_STAGE_3:
-        priv->fw_state = FIREWALL_STATE_INITIALIZED;
-        nm_device_activate_schedule_stage3_ip_config_start(self);
-        break;
-    case FIREWALL_STATE_WAIT_IP_CONFIG:
-        priv->fw_state = FIREWALL_STATE_INITIALIZED;
-        if (priv->ip_state_4 == NM_DEVICE_IP_STATE_DONE
-            || priv->ip_state_6 == NM_DEVICE_IP_STATE_DONE)
-            nm_device_start_ip_check(self);
-        break;
-    case FIREWALL_STATE_INITIALIZED:
-        break;
-    default:
-        g_return_if_reached();
-    }
-}
-
-static void
-fw_change_zone(NMDevice *self)
-{
-    NMDevicePrivate *    priv = NM_DEVICE_GET_PRIVATE(self);
-    NMConnection *       applied_connection;
-    NMSettingConnection *s_con;
-    const char *         zone;
-
-    nm_assert(priv->fw_state >= FIREWALL_STATE_INITIALIZED);
-
-    applied_connection = nm_device_get_applied_connection(self);
-    nm_assert(applied_connection);
-
-    s_con = nm_connection_get_setting_connection(applied_connection);
-    nm_assert(s_con);
-
-    if (priv->fw_call) {
-        nm_firewall_manager_cancel_call(priv->fw_call);
-        nm_assert(!priv->fw_call);
-    }
-
-    if (G_UNLIKELY(!priv->fw_mgr))
-        priv->fw_mgr = g_object_ref(nm_firewall_manager_get());
-
-    zone = nm_setting_connection_get_zone(s_con);
-#if WITH_FIREWALLD_ZONE
-    if (!zone || zone[0] == '\0') {
-        if (nm_streq0(nm_device_get_effective_ip_config_method(self, AF_INET),
-                      NM_SETTING_IP4_CONFIG_METHOD_SHARED)
-            || nm_streq0(nm_device_get_effective_ip_config_method(self, AF_INET6),
-                         NM_SETTING_IP6_CONFIG_METHOD_SHARED))
-            zone = "nm-shared";
-    }
-#endif
-    priv->fw_call = nm_firewall_manager_add_or_change_zone(priv->fw_mgr,
-                                                           nm_device_get_ip_iface(self),
-                                                           zone,
-                                                           FALSE, /* change zone */
-                                                           fw_change_zone_cb,
-                                                           self);
-}
-
-/*
- * nm_device_activate_schedule_stage3_ip_config_start
- *
- * Schedule IP configuration start
- */
-void
-nm_device_activate_schedule_stage3_ip_config_start(NMDevice *self)
-{
-    NMDevicePrivate *priv;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-    g_return_if_fail(priv->act_request.obj);
-
-    /* Add the interface to the specified firewall zone */
-    if (priv->fw_state == FIREWALL_STATE_UNMANAGED) {
-        if (!nm_device_sys_iface_state_is_external(self)) {
-            priv->fw_state = FIREWALL_STATE_WAIT_STAGE_3;
-            fw_change_zone(self);
-            return;
-        }
-
-        /* fake success. */
-        priv->fw_state = FIREWALL_STATE_INITIALIZED;
-    } else if (priv->fw_state == FIREWALL_STATE_WAIT_STAGE_3) {
-        /* a firewall call for stage3 is pending. Return and wait. */
-        return;
-    }
-
-    nm_assert(priv->fw_state == FIREWALL_STATE_INITIALIZED);
-
-    activation_source_schedule(self, activate_stage3_ip_config_start, AF_INET);
-}
-
-static NMActStageReturn
-act_stage4_ip_config_timeout(NMDevice *           self,
-                             int                  addr_family,
-                             NMDeviceStateReason *out_failure_reason)
-{
-    nm_assert_addr_family(addr_family);
-
-    if (!get_ip_config_may_fail(self, addr_family)) {
-        NM_SET_OUT(out_failure_reason, NM_DEVICE_STATE_REASON_IP_CONFIG_UNAVAILABLE);
-        return NM_ACT_STAGE_RETURN_FAILURE;
-    }
-
-    return NM_ACT_STAGE_RETURN_SUCCESS;
-}
-
-/*
- * nm_device_activate_stage4_ip4_config_timeout
- *
- * Time out on retrieving the IPv4 config.
- *
- */
-static void
-activate_stage4_ip_config_timeout_4(NMDevice *self)
-{
-    NMActStageReturn    ret            = NM_ACT_STAGE_RETURN_FAILURE;
-    NMDeviceStateReason failure_reason = NM_DEVICE_STATE_REASON_NONE;
-
-    ret = NM_DEVICE_GET_CLASS(self)->act_stage4_ip_config_timeout(self, AF_INET, &failure_reason);
-    if (ret == NM_ACT_STAGE_RETURN_POSTPONE)
-        return;
-    else if (ret == NM_ACT_STAGE_RETURN_FAILURE) {
-        nm_device_state_changed(self, NM_DEVICE_STATE_FAILED, failure_reason);
-        return;
-    }
-    g_assert(ret == NM_ACT_STAGE_RETURN_SUCCESS);
-
-    _set_ip_state(self, AF_INET, NM_DEVICE_IP_STATE_FAIL);
-
-    check_ip_state(self, FALSE, TRUE);
-}
-
-void
-nm_device_activate_schedule_ip_config_timeout(NMDevice *self, int addr_family)
-{
-    NMDevicePrivate *priv;
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-    g_return_if_fail(NM_IN_SET(addr_family, AF_INET, AF_INET6));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    g_return_if_fail(priv->act_request.obj);
-
-    activation_source_schedule(self, activate_stage4_ip_config_timeout_x[IS_IPv4], addr_family);
-}
-
-static void
-activate_stage4_ip_config_timeout_6(NMDevice *self)
-{
-    NMActStageReturn    ret            = NM_ACT_STAGE_RETURN_FAILURE;
-    NMDeviceStateReason failure_reason = NM_DEVICE_STATE_REASON_NONE;
-
-    ret = NM_DEVICE_GET_CLASS(self)->act_stage4_ip_config_timeout(self, AF_INET6, &failure_reason);
-    if (ret == NM_ACT_STAGE_RETURN_POSTPONE)
-        return;
-    if (ret == NM_ACT_STAGE_RETURN_FAILURE) {
-        nm_device_state_changed(self, NM_DEVICE_STATE_FAILED, failure_reason);
-        return;
-    }
-    g_assert(ret == NM_ACT_STAGE_RETURN_SUCCESS);
-
-    _set_ip_state(self, AF_INET6, NM_DEVICE_IP_STATE_FAIL);
-
-    check_ip_state(self, FALSE, TRUE);
-}
-
-static gboolean
-share_init(NMDevice *self, GError **error)
-{
-    char * modules[] = {"ip_tables",
-                       "iptable_nat",
-                       "nf_nat_ftp",
-                       "nf_nat_irc",
-                       "nf_nat_sip",
-                       "nf_nat_tftp",
-                       "nf_nat_pptp",
-                       "nf_nat_h323",
-                       NULL};
-    char **iter;
-    int    errsv;
-
-    if (nm_platform_sysctl_get_int32(nm_device_get_platform(self),
-                                     NMP_SYSCTL_PATHID_ABSOLUTE("/proc/sys/net/ipv4/ip_forward"),
-                                     -1)
-        == 1) {
-        /* nothing to do. */
-    } else if (!nm_platform_sysctl_set(nm_device_get_platform(self),
-                                       NMP_SYSCTL_PATHID_ABSOLUTE("/proc/sys/net/ipv4/ip_forward"),
-                                       "1")) {
-        errsv = errno;
-        _LOGD(LOGD_SHARING,
-              "share: error enabling IPv4 forwarding: (%d) %s",
-              errsv,
-              nm_strerror_native(errsv));
-        g_set_error(error,
-                    NM_UTILS_ERROR,
-                    NM_UTILS_ERROR_UNKNOWN,
-                    "cannot set ipv4/ip_forward: %s",
-                    nm_strerror_native(errsv));
-        return FALSE;
-    }
-
-    if (nm_platform_sysctl_get_int32(nm_device_get_platform(self),
-                                     NMP_SYSCTL_PATHID_ABSOLUTE("/proc/sys/net/ipv4/ip_dynaddr"),
-                                     -1)
-        == 1) {
-        /* nothing to do. */
-    } else if (!nm_platform_sysctl_set(nm_device_get_platform(self),
-                                       NMP_SYSCTL_PATHID_ABSOLUTE("/proc/sys/net/ipv4/ip_dynaddr"),
-                                       "1")) {
-        errsv = errno;
-        _LOGD(LOGD_SHARING,
-              "share: error enabling dynamic addresses: (%d) %s",
-              errsv,
-              nm_strerror_native(errsv));
-    }
-
-    for (iter = modules; *iter; iter++)
-        nm_utils_modprobe(NULL, FALSE, *iter, NULL);
-
-    return TRUE;
-}
-
-#define add_share_rule(req, table, ...)                  \
-    G_STMT_START                                         \
-    {                                                    \
-        char *_cmd = g_strdup_printf(__VA_ARGS__);       \
-        nm_act_request_add_share_rule(req, table, _cmd); \
-        g_free(_cmd);                                    \
-    }                                                    \
-    G_STMT_END
-
-static gboolean
-start_sharing(NMDevice *self, NMIP4Config *config, GError **error)
-{
-    NMDevicePrivate *           priv = NM_DEVICE_GET_PRIVATE(self);
-    NMActRequest *              req;
-    char                        str_addr[INET_ADDRSTRLEN];
-    char                        str_mask[INET_ADDRSTRLEN];
-    guint32                     netmask, network;
-    const NMPlatformIP4Address *ip4_addr = NULL;
-    const char *                ip_iface;
-    GError *                    local = NULL;
-    NMConnection *              conn;
-    NMSettingConnection *       s_con;
-    gboolean                    announce_android_metered;
-
-    g_return_val_if_fail(config, FALSE);
-
-    ip_iface = nm_device_get_ip_iface(self);
-    if (!ip_iface) {
-        g_set_error(error, NM_UTILS_ERROR, NM_UTILS_ERROR_UNKNOWN, "device has no ip interface");
-        return FALSE;
-    }
-
-    ip4_addr = nm_ip4_config_get_first_address(config);
-    if (!ip4_addr || !ip4_addr->address) {
-        g_set_error(error,
-                    NM_UTILS_ERROR,
-                    NM_UTILS_ERROR_UNKNOWN,
-                    "could not determine IPv4 address");
-        return FALSE;
-    }
-
-    if (!share_init(self, error))
-        return FALSE;
-
-    req = nm_device_get_act_request(self);
-    g_return_val_if_fail(req, FALSE);
-
-    netmask = _nm_utils_ip4_prefix_to_netmask(ip4_addr->plen);
-    _nm_utils_inet4_ntop(netmask, str_mask);
-
-    network = ip4_addr->address & netmask;
-    _nm_utils_inet4_ntop(network, str_addr);
-
-    add_share_rule(req,
-                   "nat",
-                   "POSTROUTING --source %s/%s ! --destination %s/%s --jump MASQUERADE",
-                   str_addr,
-                   str_mask,
-                   str_addr,
-                   str_mask);
-    add_share_rule(req,
-                   "filter",
-                   "FORWARD --destination %s/%s --out-interface %s --match state --state "
-                   "ESTABLISHED,RELATED --jump ACCEPT",
-                   str_addr,
-                   str_mask,
-                   ip_iface);
-    add_share_rule(req,
-                   "filter",
-                   "FORWARD --source %s/%s --in-interface %s --jump ACCEPT",
-                   str_addr,
-                   str_mask,
-                   ip_iface);
-    add_share_rule(req,
-                   "filter",
-                   "FORWARD --in-interface %s --out-interface %s --jump ACCEPT",
-                   ip_iface,
-                   ip_iface);
-    add_share_rule(req, "filter", "FORWARD --out-interface %s --jump REJECT", ip_iface);
-    add_share_rule(req, "filter", "FORWARD --in-interface %s --jump REJECT", ip_iface);
-    add_share_rule(req,
-                   "filter",
-                   "INPUT --in-interface %s --protocol udp --destination-port 67 --jump ACCEPT",
-                   ip_iface);
-    add_share_rule(req,
-                   "filter",
-                   "INPUT --in-interface %s --protocol tcp --destination-port 67 --jump ACCEPT",
-                   ip_iface);
-    add_share_rule(req,
-                   "filter",
-                   "INPUT --in-interface %s --protocol udp --destination-port 53 --jump ACCEPT",
-                   ip_iface);
-    add_share_rule(req,
-                   "filter",
-                   "INPUT --in-interface %s --protocol tcp --destination-port 53 --jump ACCEPT",
-                   ip_iface);
-
-    nm_act_request_set_shared(req, TRUE);
-
-    conn  = nm_act_request_get_applied_connection(req);
-    s_con = nm_connection_get_setting_connection(conn);
-
-    switch (nm_setting_connection_get_metered(s_con)) {
-    case NM_METERED_YES:
-        /* honor the metered flag. Note that reapply on the device does not affect
-         * the metered setting. This is different from other profiles, where the
-         * metered flag of an activated profile can be changed (reapplied). */
-        announce_android_metered = TRUE;
-        break;
-    case NM_METERED_UNKNOWN:
-        /* we pick up the current value and announce it. But again, we cannot update
-         * the announced setting without restarting dnsmasq. That means, if the default
-         * route changes w.r.t. being metered, then the shared connection does not get
-         * updated before reactivating. */
-        announce_android_metered =
-            NM_IN_SET(nm_manager_get_metered(NM_MANAGER_GET), NM_METERED_YES, NM_METERED_GUESS_YES);
-        break;
-    default:
-        announce_android_metered = FALSE;
-        break;
-    }
-
-    if (!nm_dnsmasq_manager_start(priv->dnsmasq_manager,
-                                  config,
-                                  announce_android_metered,
-                                  &local)) {
-        g_set_error(error,
-                    NM_UTILS_ERROR,
-                    NM_UTILS_ERROR_UNKNOWN,
-                    "could not start dnsmasq due to %s",
-                    local->message);
-        g_error_free(local);
-        nm_act_request_set_shared(req, FALSE);
-        return FALSE;
-    }
-
-    priv->dnsmasq_state_id = g_signal_connect(priv->dnsmasq_manager,
-                                              NM_DNS_MASQ_MANAGER_STATE_CHANGED,
-                                              G_CALLBACK(dnsmasq_state_changed_cb),
-                                              self);
-    return TRUE;
-}
-
-static void
-arp_cleanup(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    nm_clear_pointer(&priv->acd.announcing, nm_acd_manager_free);
-}
-
-void
-nm_device_arp_announce(NMDevice *self)
-{
-    NMDevicePrivate *  priv = NM_DEVICE_GET_PRIVATE(self);
-    NMConnection *     connection;
-    NMSettingIPConfig *s_ip4;
-    guint              num, i;
-    const guint8 *     hw_addr;
-    size_t             hw_addr_len = 0;
-
-    arp_cleanup(self);
-
-    hw_addr = nm_platform_link_get_address(nm_device_get_platform(self),
-                                           nm_device_get_ip_ifindex(self),
-                                           &hw_addr_len);
-
-    if (!hw_addr || hw_addr_len != ETH_ALEN)
-        return;
-
-    /* We only care about manually-configured addresses; DHCP- and autoip-configured
-     * ones should already have been seen on the network at this point.
-     */
-    connection = nm_device_get_applied_connection(self);
-    if (!connection)
-        return;
-    s_ip4 = nm_connection_get_setting_ip4_config(connection);
-    if (!s_ip4)
-        return;
-    num = nm_setting_ip_config_get_num_addresses(s_ip4);
-    if (num == 0)
-        return;
-
-    priv->acd.announcing =
-        nm_acd_manager_new(nm_device_get_ip_ifindex(self), hw_addr, hw_addr_len, NULL, NULL);
-
-    for (i = 0; i < num; i++) {
-        NMIPAddress *ip = nm_setting_ip_config_get_address(s_ip4, i);
-        in_addr_t    addr;
-
-        if (inet_pton(AF_INET, nm_ip_address_get_address(ip), &addr) == 1)
-            nm_acd_manager_add_address(priv->acd.announcing, addr);
-        else
-            g_warn_if_reached();
-    }
-
-    nm_acd_manager_announce_addresses(priv->acd.announcing);
-}
-
-static void
-activate_stage5_ip_config_result_4(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    NMActRequest *   req;
-    const char *     method;
-    int              ip_ifindex;
-    gboolean         do_announce = FALSE;
-
-    req = nm_device_get_act_request(self);
-    g_assert(req);
-
-    /* Interface must be IFF_UP before IP config can be applied */
-    ip_ifindex = nm_device_get_ip_ifindex(self);
-    if (!nm_platform_link_is_up(nm_device_get_platform(self), ip_ifindex)
-        && !nm_device_sys_iface_state_is_external_or_assume(self)) {
-        nm_platform_link_set_up(nm_device_get_platform(self), ip_ifindex, NULL);
-        if (!nm_platform_link_is_up(nm_device_get_platform(self), ip_ifindex))
-            _LOGW(LOGD_DEVICE,
-                  "interface %s not up for IP configuration",
-                  nm_device_get_ip_iface(self));
-    }
-
-    if (!ip_config_merge_and_apply(self, AF_INET, TRUE)) {
-        _LOGD(LOGD_DEVICE | LOGD_IP4, "Activation: Stage 5 of 5 (IPv4 Commit) failed");
-        nm_device_ip_method_failed(self, AF_INET, NM_DEVICE_STATE_REASON_CONFIG_FAILED);
-        return;
-    }
-
-    /* Start IPv4 sharing if we need it */
-    method = nm_device_get_effective_ip_config_method(self, AF_INET);
-    if (nm_streq(method, NM_SETTING_IP4_CONFIG_METHOD_SHARED)) {
-        gs_free_error GError *error = NULL;
-
-        if (!start_sharing(self, priv->ip_config_4, &error)) {
-            _LOGW(LOGD_SHARING,
-                  "Activation: Stage 5 of 5 (IPv4 Commit) start sharing failed: %s",
-                  error->message);
-            nm_device_ip_method_failed(self, AF_INET, NM_DEVICE_STATE_REASON_SHARED_START_FAILED);
-            return;
-        }
-    }
-
-    if (priv->dhcp_data_4.client) {
-        gs_free_error GError *error = NULL;
-
-        if (!nm_dhcp_client_accept(priv->dhcp_data_4.client, &error)) {
-            _LOGW(LOGD_DHCP4,
-                  "Activation: Stage 5 of 5 (IPv4 Commit) error accepting lease: %s",
-                  error->message);
-            nm_device_ip_method_failed(self, AF_INET, NM_DEVICE_STATE_REASON_DHCP_ERROR);
-            return;
-        }
-    }
-
-    /* If IPv4 wasn't the first to complete, and DHCP was used, then ensure
-     * dispatcher scripts get the DHCP lease information.
-     */
-    if (priv->dhcp_data_4.client && nm_device_activate_ip4_state_in_conf(self)
-        && (nm_device_get_state(self) > NM_DEVICE_STATE_IP_CONFIG)) {
-        nm_dispatcher_call_device(NM_DISPATCHER_ACTION_DHCP4_CHANGE, self, NULL, NULL, NULL, NULL);
-    }
-
-    /* Send ARP announcements */
-
-    if (nm_device_is_master(self)) {
-        CList *    iter;
-        SlaveInfo *info;
-
-        /* Skip announcement if there are no device enslaved, for two reasons:
-         * 1) the master has a temporary MAC address until the first slave comes
-         * 2) announcements are going to be dropped anyway without slaves
-         */
-        do_announce = FALSE;
-
-        c_list_for_each (iter, &priv->slaves) {
-            info = c_list_entry(iter, SlaveInfo, lst_slave);
-            if (info->slave_is_enslaved) {
-                do_announce = TRUE;
-                break;
-            }
-        }
-    } else
-        do_announce = TRUE;
-
-    if (do_announce)
-        nm_device_arp_announce(self);
-
-    /* Enter the IP_CHECK state if this is the first method to complete */
-    _set_ip_state(self, AF_INET, NM_DEVICE_IP_STATE_DONE);
-    check_ip_state(self, FALSE, TRUE);
-}
-
-void
-nm_device_activate_schedule_ip_config_result(NMDevice *self, int addr_family, NMIPConfig *config)
-{
-    NMDevicePrivate *priv;
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-    g_return_if_fail(NM_IN_SET(addr_family, AF_INET, AF_INET6));
-    g_return_if_fail(
-        !config || (addr_family == AF_INET && nm_ip_config_get_addr_family(config) == AF_INET));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (IS_IPv4) {
-        applied_config_init(&priv->dev_ip_config_4, config);
-    } else {
-        /* If IP had previously failed, move it back to NM_DEVICE_IP_STATE_CONF since we
-         * clearly now have configuration.
-         */
-        if (priv->ip_state_6 == NM_DEVICE_IP_STATE_FAIL)
-            _set_ip_state(self, AF_INET6, NM_DEVICE_IP_STATE_CONF);
-    }
-
-    activation_source_schedule(self, activate_stage5_ip_config_result_x[IS_IPv4], addr_family);
-}
-
-NMDeviceIPState
-nm_device_activate_get_ip_state(NMDevice *self, int addr_family)
-{
-    const gboolean IS_IPv4 = (addr_family == AF_INET);
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), NM_DEVICE_IP_STATE_NONE);
-    g_return_val_if_fail(NM_IN_SET(addr_family, AF_INET, AF_INET6), NM_DEVICE_IP_STATE_NONE);
-
-    return NM_DEVICE_GET_PRIVATE(self)->ip_state_x[IS_IPv4];
-}
-
-static void
-dad6_add_pending_address(NMDevice *             self,
-                         NMPlatform *           platform,
-                         int                    ifindex,
-                         const struct in6_addr *address,
-                         NMIP6Config **         dad6_config)
-{
-    const NMPlatformIP6Address *pl_addr;
-
-    pl_addr = nm_platform_ip6_address_get(platform, ifindex, address);
-    if (pl_addr && NM_FLAGS_HAS(pl_addr->n_ifa_flags, IFA_F_TENTATIVE)
-        && !NM_FLAGS_HAS(pl_addr->n_ifa_flags, IFA_F_DADFAILED)
-        && !NM_FLAGS_HAS(pl_addr->n_ifa_flags, IFA_F_OPTIMISTIC)) {
-        _LOGt(LOGD_DEVICE,
-              "IPv6 DAD: pending address %s",
-              nm_platform_ip6_address_to_string(pl_addr, NULL, 0));
-
-        if (!*dad6_config)
-            *dad6_config = nm_device_ip6_config_new(self);
-
-        nm_ip6_config_add_address(*dad6_config, pl_addr);
-    }
-}
-
-/*
- * Returns a NMIP6Config containing NM-configured addresses which
- * have the tentative flag, or NULL if none is present.
- */
-static NMIP6Config *
-dad6_get_pending_addresses(NMDevice *self)
-{
-    NMDevicePrivate *priv    = NM_DEVICE_GET_PRIVATE(self);
-    NMIP6Config *    confs[] = {(NMIP6Config *) applied_config_get_current(&priv->ac_ip6_config),
-                            (NMIP6Config *) applied_config_get_current(&priv->dhcp6.ip6_config),
-                            priv->con_ip_config_6,
-                            (NMIP6Config *) applied_config_get_current(&priv->dev2_ip_config_6)};
-    const NMPlatformIP6Address *addr;
-    NMIP6Config *               dad6_config = NULL;
-    NMDedupMultiIter            ipconf_iter;
-    guint                       i;
-    int                         ifindex;
-    NMPlatform *                platform;
-
-    ifindex = nm_device_get_ip_ifindex(self);
-    g_return_val_if_fail(ifindex > 0, NULL);
-
-    platform = nm_device_get_platform(self);
-
-    if (priv->ipv6ll_has) {
-        dad6_add_pending_address(self, platform, ifindex, &priv->ipv6ll_addr, &dad6_config);
-    }
-
-    /* We are interested only in addresses that we have explicitly configured,
-     * not in externally added ones.
-     */
-    for (i = 0; i < G_N_ELEMENTS(confs); i++) {
-        if (!confs[i])
-            continue;
-
-        nm_ip_config_iter_ip6_address_for_each (&ipconf_iter, confs[i], &addr) {
-            dad6_add_pending_address(self, platform, ifindex, &addr->address, &dad6_config);
-        }
-    }
-
-    return dad6_config;
-}
-
-static void
-activate_stage5_ip_config_result_6(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    NMActRequest *   req;
-    const char *     method;
-    int              ip_ifindex;
-    int              errsv;
-
-    req = nm_device_get_act_request(self);
-    g_assert(req);
-
-    /* Interface must be IFF_UP before IP config can be applied */
-    ip_ifindex = nm_device_get_ip_ifindex(self);
-    g_return_if_fail(ip_ifindex);
-
-    if (!nm_platform_link_is_up(nm_device_get_platform(self), ip_ifindex)
-        && !nm_device_sys_iface_state_is_external_or_assume(self)) {
-        nm_platform_link_set_up(nm_device_get_platform(self), ip_ifindex, NULL);
-        if (!nm_platform_link_is_up(nm_device_get_platform(self), ip_ifindex))
-            _LOGW(LOGD_DEVICE,
-                  "interface %s not up for IP configuration",
-                  nm_device_get_ip_iface(self));
-    }
-
-    if (ip_config_merge_and_apply(self, AF_INET6, TRUE)) {
-        if (priv->dhcp6.mode != NM_NDISC_DHCP_LEVEL_NONE
-            && priv->ip_state_6 == NM_DEVICE_IP_STATE_CONF) {
-            if (applied_config_get_current(&priv->dhcp6.ip6_config)) {
-                /* If IPv6 wasn't the first IP to complete, and DHCP was used,
-                 * then ensure dispatcher scripts get the DHCP lease information.
-                 */
-                nm_dispatcher_call_device(NM_DISPATCHER_ACTION_DHCP6_CHANGE,
-                                          self,
-                                          NULL,
-                                          NULL,
-                                          NULL,
-                                          NULL);
-            } else {
-                /* still waiting for first dhcp6 lease. */
-                return;
-            }
-        }
-
-        /* Start IPv6 forwarding if we need it */
-        method = nm_device_get_effective_ip_config_method(self, AF_INET6);
-        if (nm_streq(method, NM_SETTING_IP6_CONFIG_METHOD_SHARED)) {
-            if (!nm_platform_sysctl_set(
-                    nm_device_get_platform(self),
-                    NMP_SYSCTL_PATHID_ABSOLUTE("/proc/sys/net/ipv6/conf/all/forwarding"),
-                    "1")) {
-                errsv = errno;
-                _LOGE(LOGD_SHARING,
-                      "share: error enabling IPv6 forwarding: (%d) %s",
-                      errsv,
-                      nm_strerror_native(errsv));
-                nm_device_ip_method_failed(self,
-                                           AF_INET6,
-                                           NM_DEVICE_STATE_REASON_SHARED_START_FAILED);
-            }
-        }
-
-        /* Check if we have to wait for DAD */
-        if (priv->ip_state_6 == NM_DEVICE_IP_STATE_CONF && !priv->dad6_ip6_config) {
-            if (!priv->carrier && priv->ignore_carrier && get_ip_config_may_fail(self, AF_INET6))
-                _LOGI(LOGD_DEVICE | LOGD_IP6,
-                      "IPv6 DAD: carrier missing and ignored, not delaying activation");
-            else
-                priv->dad6_ip6_config = dad6_get_pending_addresses(self);
-
-            if (priv->dad6_ip6_config) {
-                _LOGD(LOGD_DEVICE | LOGD_IP6, "IPv6 DAD: awaiting termination");
-            } else {
-                _set_ip_state(self, AF_INET6, NM_DEVICE_IP_STATE_DONE);
-                check_ip_state(self, FALSE, TRUE);
-            }
-        }
-    } else {
-        _LOGW(LOGD_DEVICE | LOGD_IP6, "Activation: Stage 5 of 5 (IPv6 Commit) failed");
-        nm_device_ip_method_failed(self, AF_INET6, NM_DEVICE_STATE_REASON_CONFIG_FAILED);
-    }
-}
-
-/*****************************************************************************/
-
-static void
-act_request_set(NMDevice *self, NMActRequest *act_request)
-{
-    NMDevicePrivate *priv;
-
-    nm_assert(NM_IS_DEVICE(self));
-    nm_assert(!act_request || NM_IS_ACT_REQUEST(act_request));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!priv->act_request.visible && priv->act_request.obj == act_request)
-        return;
-
-    /* always clear the public flag. The few callers that set a new @act_request
-     * don't want that the property is public yet.  */
-    nm_dbus_track_obj_path_set(&priv->act_request, act_request, FALSE);
-
-    if (act_request) {
-        switch (nm_active_connection_get_activation_type(NM_ACTIVE_CONNECTION(act_request))) {
-        case NM_ACTIVATION_TYPE_EXTERNAL:
-            break;
-        case NM_ACTIVATION_TYPE_ASSUME:
-            if (priv->sys_iface_state == NM_DEVICE_SYS_IFACE_STATE_EXTERNAL)
-                nm_device_sys_iface_state_set(self, NM_DEVICE_SYS_IFACE_STATE_ASSUME);
-            break;
-        case NM_ACTIVATION_TYPE_MANAGED:
-            if (NM_IN_SET_TYPED(NMDeviceSysIfaceState,
-                                priv->sys_iface_state,
-                                NM_DEVICE_SYS_IFACE_STATE_EXTERNAL,
-                                NM_DEVICE_SYS_IFACE_STATE_ASSUME))
-                nm_device_sys_iface_state_set(self, NM_DEVICE_SYS_IFACE_STATE_MANAGED);
-            break;
-        }
-    }
-}
-
-static void
-dnsmasq_cleanup(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!priv->dnsmasq_manager)
-        return;
-
-    nm_clear_g_signal_handler(priv->dnsmasq_manager, &priv->dnsmasq_state_id);
-
-    nm_dnsmasq_manager_stop(priv->dnsmasq_manager);
-    g_object_unref(priv->dnsmasq_manager);
-    priv->dnsmasq_manager = NULL;
-}
-
-gboolean
-nm_device_is_nm_owned(NMDevice *self)
-{
-    return NM_DEVICE_GET_PRIVATE(self)->nm_owned;
-}
-
-/*
- * delete_on_deactivate_link_delete
- *
- * Function will be queued with g_idle_add to call
- * nm_platform_link_delete for the underlying resources
- * of the device.
- */
-static gboolean
-delete_on_deactivate_link_delete(gpointer user_data)
-{
-    DeleteOnDeactivateData *data = user_data;
-    NMDevice *              self = data->device;
-
-    _LOGD(LOGD_DEVICE,
-          "delete_on_deactivate: cleanup and delete virtual link #%d (id=%u)",
-          data->ifindex,
-          data->idle_add_id);
-
-    if (data->device) {
-        NMDevicePrivate *priv       = NM_DEVICE_GET_PRIVATE(data->device);
-        gs_free_error GError *error = NULL;
-
-        g_object_remove_weak_pointer(G_OBJECT(data->device), (void **) &data->device);
-        priv->delete_on_deactivate_data = NULL;
-
-        if (!nm_device_unrealize(data->device, TRUE, &error))
-            _LOGD(LOGD_DEVICE,
-                  "delete_on_deactivate: unrealizing %d failed (%s)",
-                  data->ifindex,
-                  error->message);
-    } else if (data->ifindex > 0)
-        nm_platform_link_delete(nm_device_get_platform(self), data->ifindex);
-
-    nm_device_emit_recheck_auto_activate(self);
-
-    g_free(data);
-    return FALSE;
-}
-
-static void
-delete_on_deactivate_unschedule(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->delete_on_deactivate_data) {
-        DeleteOnDeactivateData *data = priv->delete_on_deactivate_data;
-
-        priv->delete_on_deactivate_data = NULL;
-
-        g_source_remove(data->idle_add_id);
-        g_object_remove_weak_pointer(G_OBJECT(self), (void **) &data->device);
-        _LOGD(LOGD_DEVICE,
-              "delete_on_deactivate: cancel cleanup and delete virtual link #%d (id=%u)",
-              data->ifindex,
-              data->idle_add_id);
-        g_free(data);
-    }
-}
-
-static void
-delete_on_deactivate_check_and_schedule(NMDevice *self, int ifindex)
-{
-    NMDevicePrivate *       priv = NM_DEVICE_GET_PRIVATE(self);
-    DeleteOnDeactivateData *data;
-
-    if (!priv->nm_owned)
-        return;
-    if (priv->queued_act_request)
-        return;
-    if (!nm_device_is_software(self) || !nm_device_is_real(self))
-        return;
-    if (nm_device_get_state(self) == NM_DEVICE_STATE_UNMANAGED)
-        return;
-    if (nm_device_get_state(self) == NM_DEVICE_STATE_UNAVAILABLE)
-        return;
-    delete_on_deactivate_unschedule(self); /* always cancel and reschedule */
-
-    data = g_new(DeleteOnDeactivateData, 1);
-    g_object_add_weak_pointer(G_OBJECT(self), (void **) &data->device);
-    data->device                    = self;
-    data->ifindex                   = ifindex;
-    data->idle_add_id               = g_idle_add(delete_on_deactivate_link_delete, data);
-    priv->delete_on_deactivate_data = data;
-
-    _LOGD(LOGD_DEVICE,
-          "delete_on_deactivate: schedule cleanup and delete virtual link #%d (id=%u)",
-          ifindex,
-          data->idle_add_id);
-}
-
-static void
-_cleanup_ip_pre(NMDevice *self, int addr_family, CleanupType cleanup_type)
-{
-    NMDevicePrivate *priv    = NM_DEVICE_GET_PRIVATE(self);
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-
-    _set_ip_state(self, addr_family, NM_DEVICE_IP_STATE_NONE);
-
-    if (nm_clear_g_source(&priv->queued_ip_config_id_x[IS_IPv4])) {
-        _LOGD(LOGD_DEVICE,
-              "clearing queued IP%c config change",
-              nm_utils_addr_family_to_char(addr_family));
-    }
-
-    if (IS_IPv4) {
-        dhcp4_cleanup(self, cleanup_type, FALSE);
-        arp_cleanup(self);
-        dnsmasq_cleanup(self);
-        ipv4ll_cleanup(self);
-        g_slist_free_full(priv->acd.dad_list, (GDestroyNotify) nm_acd_manager_free);
-        priv->acd.dad_list = NULL;
-    } else {
-        g_slist_free_full(priv->dad6_failed_addrs, (GDestroyNotify) nmp_object_unref);
-        priv->dad6_failed_addrs = NULL;
-        g_clear_object(&priv->dad6_ip6_config);
-        dhcp6_cleanup(self, cleanup_type, FALSE);
-        nm_clear_g_source(&priv->linklocal6_timeout_id);
-        addrconf6_cleanup(self);
-    }
-}
-
-gboolean
-_nm_device_hash_check_invalid_keys(GHashTable *       hash,
-                                   const char *       setting_name,
-                                   GError **          error,
-                                   const char *const *whitelist)
-{
-    guint found_whitelisted_keys = 0;
-    guint i;
-
-    nm_assert(hash && g_hash_table_size(hash) > 0);
-    nm_assert(whitelist && whitelist[0]);
-
-#if NM_MORE_ASSERTS > 10
-    /* Require whitelist to only contain unique keys. */
-    {
-        gs_unref_hashtable GHashTable *check_dups =
-            g_hash_table_new_full(nm_str_hash, g_str_equal, NULL, NULL);
-
-        for (i = 0; whitelist[i]; i++) {
-            if (!g_hash_table_add(check_dups, (char *) whitelist[i]))
-                nm_assert(FALSE);
-        }
-        nm_assert(g_hash_table_size(check_dups) > 0);
-    }
-#endif
-
-    for (i = 0; whitelist[i]; i++) {
-        if (g_hash_table_contains(hash, whitelist[i]))
-            found_whitelisted_keys++;
-    }
-
-    if (found_whitelisted_keys == g_hash_table_size(hash)) {
-        /* Good, there are only whitelisted keys in the hash. */
-        return TRUE;
-    }
-
-    if (error) {
-        GHashTableIter iter;
-        const char *   k                 = NULL;
-        const char *   first_invalid_key = NULL;
-
-        g_hash_table_iter_init(&iter, hash);
-        while (g_hash_table_iter_next(&iter, (gpointer *) &k, NULL)) {
-            if (nm_utils_strv_find_first((char **) whitelist, -1, k) < 0) {
-                first_invalid_key = k;
-                break;
-            }
-        }
-        if (setting_name) {
-            g_set_error(error,
-                        NM_DEVICE_ERROR,
-                        NM_DEVICE_ERROR_INCOMPATIBLE_CONNECTION,
-                        "Can't reapply changes to '%s.%s' setting",
-                        setting_name,
-                        first_invalid_key);
-        } else {
-            g_set_error(error,
-                        NM_DEVICE_ERROR,
-                        NM_DEVICE_ERROR_INCOMPATIBLE_CONNECTION,
-                        "Can't reapply any changes to '%s' setting",
-                        first_invalid_key);
-        }
-        g_return_val_if_fail(first_invalid_key, FALSE);
-    }
-
-    return FALSE;
-}
-
-void
-nm_device_reactivate_ip4_config(NMDevice *         self,
-                                NMSettingIPConfig *s_ip4_old,
-                                NMSettingIPConfig *s_ip4_new)
-{
-    NMDevicePrivate *priv;
-    const char *     method_old, *method_new;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->ip_state_4 != NM_DEVICE_IP_STATE_NONE) {
-        g_clear_object(&priv->con_ip_config_4);
-        g_clear_object(&priv->ext_ip_config_4);
-        g_clear_object(&priv->dev_ip_config_4.current);
-        g_clear_object(&priv->dev2_ip_config_4.current);
-        priv->con_ip_config_4 = nm_device_ip4_config_new(self);
-        nm_ip4_config_merge_setting(priv->con_ip_config_4,
-                                    s_ip4_new,
-                                    _prop_get_connection_mdns(self),
-                                    _prop_get_connection_llmnr(self),
-                                    nm_device_get_route_table(self, AF_INET),
-                                    nm_device_get_route_metric(self, AF_INET));
-
-        method_old = s_ip4_old ? nm_setting_ip_config_get_method(s_ip4_old)
-                               : NM_SETTING_IP4_CONFIG_METHOD_DISABLED;
-        method_new = s_ip4_new ? nm_setting_ip_config_get_method(s_ip4_new)
-                               : NM_SETTING_IP4_CONFIG_METHOD_DISABLED;
-
-        if (!nm_streq0(method_old, method_new)) {
-            _cleanup_ip_pre(self, AF_INET, CLEANUP_TYPE_DECONFIGURE);
-            _set_ip_state(self, AF_INET, NM_DEVICE_IP_STATE_WAIT);
-            if (!nm_device_activate_stage3_ip4_start(self))
-                _LOGW(LOGD_IP4, "Failed to apply IPv4 configuration");
-            return;
-        }
-
-        if (s_ip4_old && s_ip4_new) {
-            gint64 metric_old, metric_new;
-
-            /* For dynamic IP methods (DHCP, IPv4LL, WWAN) the route metric is
-             * set at activation/renewal time using the value from static
-             * configuration. To support runtime change we need to update the
-             * dynamic configuration in place and tell the DHCP client the new
-             * value to use for future renewals.
-             */
-            metric_old = nm_setting_ip_config_get_route_metric(s_ip4_old);
-            metric_new = nm_setting_ip_config_get_route_metric(s_ip4_new);
-
-            if (metric_old != metric_new) {
-                if (priv->dev_ip_config_4.orig) {
-                    nm_ip4_config_update_routes_metric((NMIP4Config *) priv->dev_ip_config_4.orig,
-                                                       nm_device_get_route_metric(self, AF_INET));
-                }
-                if (priv->dev2_ip_config_4.orig) {
-                    nm_ip4_config_update_routes_metric((NMIP4Config *) priv->dev2_ip_config_4.orig,
-                                                       nm_device_get_route_metric(self, AF_INET));
-                }
-                if (priv->dhcp_data_4.client) {
-                    nm_dhcp_client_set_route_metric(priv->dhcp_data_4.client,
-                                                    nm_device_get_route_metric(self, AF_INET));
-                }
-            }
-        }
-
-        if (nm_device_get_ip_ifindex(self) > 0 && !ip_config_merge_and_apply(self, AF_INET, TRUE))
-            _LOGW(LOGD_IP4, "Failed to reapply IPv4 configuration");
-    }
-}
-
-void
-nm_device_reactivate_ip6_config(NMDevice *         self,
-                                NMSettingIPConfig *s_ip6_old,
-                                NMSettingIPConfig *s_ip6_new)
-{
-    NMDevicePrivate *priv;
-    const char *     method_old, *method_new;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->ip_state_6 != NM_DEVICE_IP_STATE_NONE) {
-        g_clear_object(&priv->con_ip_config_6);
-        g_clear_object(&priv->ext_ip_config_6);
-        g_clear_object(&priv->ac_ip6_config.current);
-        g_clear_object(&priv->dhcp6.ip6_config.current);
-        g_clear_object(&priv->dev2_ip_config_6.current);
-        if (priv->ipv6ll_handle && !IN6_IS_ADDR_UNSPECIFIED(&priv->ipv6ll_addr))
-            priv->ipv6ll_has = TRUE;
-        priv->con_ip_config_6 = nm_device_ip6_config_new(self);
-        nm_ip6_config_merge_setting(priv->con_ip_config_6,
-                                    s_ip6_new,
-                                    nm_device_get_route_table(self, AF_INET6),
-                                    nm_device_get_route_metric(self, AF_INET6));
-
-        method_old = s_ip6_old ? nm_setting_ip_config_get_method(s_ip6_old)
-                               : NM_SETTING_IP6_CONFIG_METHOD_IGNORE;
-        method_new = s_ip6_new ? nm_setting_ip_config_get_method(s_ip6_new)
-                               : NM_SETTING_IP6_CONFIG_METHOD_IGNORE;
-
-        if (!nm_streq0(method_old, method_new)) {
-            _cleanup_ip_pre(self, AF_INET6, CLEANUP_TYPE_DECONFIGURE);
-            _set_ip_state(self, AF_INET6, NM_DEVICE_IP_STATE_WAIT);
-            if (!nm_device_activate_stage3_ip6_start(self))
-                _LOGW(LOGD_IP6, "Failed to apply IPv6 configuration");
-            return;
-        }
-
-        if (s_ip6_old && s_ip6_new) {
-            gint64 metric_old, metric_new;
-
-            /* See comment in nm_device_reactivate_ip4_config() */
-            metric_old = nm_setting_ip_config_get_route_metric(s_ip6_old);
-            metric_new = nm_setting_ip_config_get_route_metric(s_ip6_new);
-
-            if (metric_old != metric_new) {
-                if (priv->ac_ip6_config.orig) {
-                    nm_ip6_config_update_routes_metric((NMIP6Config *) priv->ac_ip6_config.orig,
-                                                       nm_device_get_route_metric(self, AF_INET6));
-                }
-                if (priv->dhcp6.ip6_config.orig) {
-                    nm_ip6_config_update_routes_metric((NMIP6Config *) priv->dhcp6.ip6_config.orig,
-                                                       nm_device_get_route_metric(self, AF_INET6));
-                }
-                if (priv->dev2_ip_config_6.orig) {
-                    nm_ip6_config_update_routes_metric((NMIP6Config *) priv->dev2_ip_config_6.orig,
-                                                       nm_device_get_route_metric(self, AF_INET6));
-                }
-                if (priv->dhcp_data_6.client) {
-                    nm_dhcp_client_set_route_metric(priv->dhcp_data_6.client,
-                                                    nm_device_get_route_metric(self, AF_INET6));
-                }
-            }
-        }
-
-        if (nm_device_get_ip_ifindex(self) > 0 && !ip_config_merge_and_apply(self, AF_INET6, TRUE))
-            _LOGW(LOGD_IP4, "Failed to reapply IPv6 configuration");
-    }
-}
-
-static void
-_pacrunner_manager_add(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    nm_pacrunner_manager_remove_clear(&priv->pacrunner_conf_id);
-
-    priv->pacrunner_conf_id = nm_pacrunner_manager_add(nm_pacrunner_manager_get(),
-                                                       priv->proxy_config,
-                                                       nm_device_get_ip_iface(self),
-                                                       NULL,
-                                                       NULL);
-}
-
-static void
-reactivate_proxy_config(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!priv->pacrunner_conf_id)
-        return;
-    nm_device_set_proxy_config(self, priv->dhcp4.pac_url);
-    _pacrunner_manager_add(self);
-}
-
-static gboolean
-can_reapply_change(NMDevice *  self,
-                   const char *setting_name,
-                   NMSetting * s_old,
-                   NMSetting * s_new,
-                   GHashTable *diffs,
-                   GError **   error)
-{
-    if (nm_streq(setting_name, NM_SETTING_CONNECTION_SETTING_NAME)) {
-        /* Whitelist allowed properties from "connection" setting which are
-         * allowed to differ.
-         *
-         * This includes UUID, there is no principal problem with reapplying a
-         * connection and changing its UUID. In fact, disallowing it makes it
-         * cumbersome for the user to reapply any connection but the original
-         * settings-connection. */
-        return nm_device_hash_check_invalid_keys(diffs,
-                                                 NM_SETTING_CONNECTION_SETTING_NAME,
-                                                 error,
-                                                 NM_SETTING_CONNECTION_ID,
-                                                 NM_SETTING_CONNECTION_UUID,
-                                                 NM_SETTING_CONNECTION_STABLE_ID,
-                                                 NM_SETTING_CONNECTION_AUTOCONNECT,
-                                                 NM_SETTING_CONNECTION_ZONE,
-                                                 NM_SETTING_CONNECTION_METERED,
-                                                 NM_SETTING_CONNECTION_LLDP,
-                                                 NM_SETTING_CONNECTION_MDNS,
-                                                 NM_SETTING_CONNECTION_LLMNR);
-    } else if (NM_IN_STRSET(setting_name,
-                            NM_SETTING_USER_SETTING_NAME,
-                            NM_SETTING_PROXY_SETTING_NAME,
-                            NM_SETTING_IP4_CONFIG_SETTING_NAME,
-                            NM_SETTING_IP6_CONFIG_SETTING_NAME)) {
-        return TRUE;
-    } else if (nm_streq(setting_name, NM_SETTING_WIRED_SETTING_NAME)
-               && NM_IN_SET(NM_DEVICE_GET_CLASS(self)->get_configured_mtu,
-                            nm_device_get_configured_mtu_wired_parent,
-                            nm_device_get_configured_mtu_for_wired)) {
-        return nm_device_hash_check_invalid_keys(diffs,
-                                                 NM_SETTING_WIRED_SETTING_NAME,
-                                                 error,
-                                                 NM_SETTING_WIRED_MTU);
-    } else {
-        g_set_error(error,
-                    NM_DEVICE_ERROR,
-                    NM_DEVICE_ERROR_INCOMPATIBLE_CONNECTION,
-                    "Can't reapply any changes to '%s' setting",
-                    setting_name);
-        return FALSE;
-    }
-}
-
-static void
-reapply_connection(NMDevice *self, NMConnection *con_old, NMConnection *con_new)
-{}
-
-/* check_and_reapply_connection:
- * @connection: the new connection settings to be applied or %NULL to reapply
- *   the current settings connection
- * @version_id: either zero, or the current version id for the applied
- *   connection.
- * @audit_args: on return, a string representing the changes
- * @error: the error if %FALSE is returned
- *
- * Change configuration of an already configured device if possible.
- * Updates the device's applied connection upon success.
- *
- * Return: %FALSE if the new configuration can not be reapplied.
- */
-static gboolean
-check_and_reapply_connection(NMDevice *    self,
-                             NMConnection *connection,
-                             guint64       version_id,
-                             char **       audit_args,
-                             GError **     error)
-{
-    NMDeviceClass *  klass                      = NM_DEVICE_GET_CLASS(self);
-    NMDevicePrivate *priv                       = NM_DEVICE_GET_PRIVATE(self);
-    NMConnection *   applied                    = nm_device_get_applied_connection(self);
-    gs_unref_object NMConnection *applied_clone = NULL;
-    gs_unref_hashtable GHashTable *diffs        = NULL;
-    NMConnection *                 con_old, *con_new;
-    NMSettingIPConfig *            s_ip4_old, *s_ip4_new;
-    NMSettingIPConfig *            s_ip6_old, *s_ip6_new;
-    GHashTableIter                 iter;
-
-    if (priv->state < NM_DEVICE_STATE_PREPARE || priv->state > NM_DEVICE_STATE_ACTIVATED) {
-        g_set_error_literal(error,
-                            NM_DEVICE_ERROR,
-                            NM_DEVICE_ERROR_NOT_ACTIVE,
-                            "Device is not activated");
-        return FALSE;
-    }
-
-    nm_connection_diff(connection,
-                       applied,
-                       NM_SETTING_COMPARE_FLAG_IGNORE_TIMESTAMP
-                           | NM_SETTING_COMPARE_FLAG_IGNORE_SECRETS,
-                       &diffs);
-
-    if (audit_args) {
-        if (diffs && nm_audit_manager_audit_enabled(nm_audit_manager_get()))
-            *audit_args = nm_utils_format_con_diff_for_audit(diffs);
-        else
-            *audit_args = NULL;
-    }
-
-    /**************************************************************************
-     * check for unsupported changes and reject to reapply
-     *************************************************************************/
-    if (diffs) {
-        char *      setting_name;
-        GHashTable *setting_diff;
-
-        g_hash_table_iter_init(&iter, diffs);
-        while (
-            g_hash_table_iter_next(&iter, (gpointer *) &setting_name, (gpointer *) &setting_diff)) {
-            if (!klass->can_reapply_change(
-                    self,
-                    setting_name,
-                    nm_connection_get_setting_by_name(applied, setting_name),
-                    nm_connection_get_setting_by_name(connection, setting_name),
-                    setting_diff,
-                    error))
-                return FALSE;
-        }
-    }
-
-    if (version_id != 0
-        && version_id
-               != nm_active_connection_version_id_get(
-                   (NMActiveConnection *) priv->act_request.obj)) {
-        g_set_error_literal(
-            error,
-            NM_DEVICE_ERROR,
-            NM_DEVICE_ERROR_VERSION_ID_MISMATCH,
-            "Reapply failed because device changed in the meantime and the version-id mismatches");
-        return FALSE;
-    }
-
-    /**************************************************************************
-     * Update applied connection
-     *************************************************************************/
-
-    if (diffs)
-        nm_active_connection_version_id_bump((NMActiveConnection *) priv->act_request.obj);
-
-    _LOGD(LOGD_DEVICE,
-          "reapply (version-id %llu%s)",
-          (unsigned long long) nm_active_connection_version_id_get(
-              ((NMActiveConnection *) priv->act_request.obj)),
-          diffs ? "" : " (unmodified)");
-
-    if (diffs) {
-        NMConnection *  connection_clean                    = connection;
-        gs_unref_object NMConnection *connection_clean_free = NULL;
-
-        {
-            NMSettingConnection *s_con_a, *s_con_n;
-
-            /* we allow re-applying a connection with differing ID, UUID, STABLE_ID and AUTOCONNECT.
-             * This is for convenience but these values are not actually changeable. So, check
-             * if they changed, and if the did revert to the original values. */
-            s_con_a = nm_connection_get_setting_connection(applied);
-            s_con_n = nm_connection_get_setting_connection(connection);
-
-            if (!nm_streq(nm_setting_connection_get_id(s_con_a),
-                          nm_setting_connection_get_id(s_con_n))
-                || !nm_streq(nm_setting_connection_get_uuid(s_con_a),
-                             nm_setting_connection_get_uuid(s_con_n))
-                || nm_setting_connection_get_autoconnect(s_con_a)
-                       != nm_setting_connection_get_autoconnect(s_con_n)
-                || !nm_streq0(nm_setting_connection_get_stable_id(s_con_a),
-                              nm_setting_connection_get_stable_id(s_con_n))) {
-                connection_clean_free = nm_simple_connection_new_clone(connection);
-                connection_clean      = connection_clean_free;
-                s_con_n               = nm_connection_get_setting_connection(connection_clean);
-                g_object_set(s_con_n,
-                             NM_SETTING_CONNECTION_ID,
-                             nm_setting_connection_get_id(s_con_a),
-                             NM_SETTING_CONNECTION_UUID,
-                             nm_setting_connection_get_uuid(s_con_a),
-                             NM_SETTING_CONNECTION_AUTOCONNECT,
-                             nm_setting_connection_get_autoconnect(s_con_a),
-                             NM_SETTING_CONNECTION_STABLE_ID,
-                             nm_setting_connection_get_stable_id(s_con_a),
-                             NULL);
-            }
-        }
-
-        con_old = applied_clone = nm_simple_connection_new_clone(applied);
-        con_new                 = applied;
-        nm_connection_replace_settings_from_connection(applied, connection_clean);
-        nm_connection_clear_secrets(applied);
-    } else
-        con_old = con_new = applied;
-
-    priv->v4_commit_first_time = TRUE;
-    priv->v6_commit_first_time = TRUE;
-
-    priv->v4_route_table_initialized = FALSE;
-    priv->v6_route_table_initialized = FALSE;
-
-    /**************************************************************************
-     * Reapply changes
-     *
-     * Note that reapply_connection() is called as very first. This is for example
-     * important for NMDeviceWireGuard, which implements coerce_route_table()
-     * and get_extra_rules().
-     * That is because NMDeviceWireGuard caches settings, so during reapply that
-     * cache must be updated *first*.
-     *************************************************************************/
-    klass->reapply_connection(self, con_old, con_new);
-
-    if (priv->state >= NM_DEVICE_STATE_CONFIG)
-        lldp_init(self, FALSE);
-
-    if (priv->state >= NM_DEVICE_STATE_IP_CONFIG) {
-        s_ip4_old = nm_connection_get_setting_ip4_config(con_old);
-        s_ip4_new = nm_connection_get_setting_ip4_config(con_new);
-        s_ip6_old = nm_connection_get_setting_ip6_config(con_old);
-        s_ip6_new = nm_connection_get_setting_ip6_config(con_new);
-
-        /* Allow reapply of MTU */
-        priv->mtu_source = NM_DEVICE_MTU_SOURCE_NONE;
-
-        nm_device_reactivate_ip4_config(self, s_ip4_old, s_ip4_new);
-        nm_device_reactivate_ip6_config(self, s_ip6_old, s_ip6_new);
-
-        _routing_rules_sync(self, NM_TERNARY_TRUE);
-
-        reactivate_proxy_config(self);
-    }
-
-    if (priv->state >= NM_DEVICE_STATE_IP_CHECK)
-        nm_device_update_firewall_zone(self);
-
-    if (priv->state >= NM_DEVICE_STATE_ACTIVATED)
-        nm_device_update_metered(self);
-
-    return TRUE;
-}
-
-gboolean
-nm_device_reapply(NMDevice *self, NMConnection *connection, GError **error)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    return check_and_reapply_connection(self, connection, 0, NULL, error);
-}
-
-typedef struct {
-    NMConnection *connection;
-    guint64       version_id;
-} ReapplyData;
-
-static void
-reapply_cb(NMDevice *             self,
-           GDBusMethodInvocation *context,
-           NMAuthSubject *        subject,
-           GError *               error,
-           gpointer               user_data)
-{
-    ReapplyData *   reapply_data             = user_data;
-    guint64         version_id               = 0;
-    gs_unref_object NMConnection *connection = NULL;
-    GError *                      local      = NULL;
-    gs_free char *                audit_args = NULL;
-
-    if (reapply_data) {
-        connection = reapply_data->connection;
-        version_id = reapply_data->version_id;
-        g_slice_free(ReapplyData, reapply_data);
-    }
-
-    if (error) {
-        nm_audit_log_device_op(NM_AUDIT_OP_DEVICE_REAPPLY,
-                               self,
-                               FALSE,
-                               NULL,
-                               subject,
-                               error->message);
-        g_dbus_method_invocation_return_gerror(context, error);
-        return;
-    }
-
-    if (nm_device_sys_iface_state_is_external(self))
-        nm_device_sys_iface_state_set(self, NM_DEVICE_SYS_IFACE_STATE_MANAGED);
-
-    if (!check_and_reapply_connection(self,
-                                      connection
-                                          ?: nm_device_get_settings_connection_get_connection(self),
-                                      version_id,
-                                      &audit_args,
-                                      &local)) {
-        nm_audit_log_device_op(NM_AUDIT_OP_DEVICE_REAPPLY,
-                               self,
-                               FALSE,
-                               audit_args,
-                               subject,
-                               local->message);
-        g_dbus_method_invocation_take_error(context, local);
-        local = NULL;
-    } else {
-        nm_audit_log_device_op(NM_AUDIT_OP_DEVICE_REAPPLY, self, TRUE, audit_args, subject, NULL);
-        g_dbus_method_invocation_return_value(context, NULL);
-    }
-}
-
-static void
-impl_device_reapply(NMDBusObject *                     obj,
-                    const NMDBusInterfaceInfoExtended *interface_info,
-                    const NMDBusMethodInfoExtended *   method_info,
-                    GDBusConnection *                  dbus_connection,
-                    const char *                       sender,
-                    GDBusMethodInvocation *            invocation,
-                    GVariant *                         parameters)
-{
-    NMDevice *            self = NM_DEVICE(obj);
-    NMDevicePrivate *     priv = NM_DEVICE_GET_PRIVATE(self);
-    NMSettingsConnection *settings_connection;
-    NMConnection *        connection = NULL;
-    GError *              error      = NULL;
-    ReapplyData *         reapply_data;
-    gs_unref_variant GVariant *settings = NULL;
-    guint64                    version_id;
-    guint32                    flags;
-
-    g_variant_get(parameters, "(@a{sa{sv}}tu)", &settings, &version_id, &flags);
-
-    /* No flags supported as of now. */
-    if (flags != 0) {
-        error =
-            g_error_new_literal(NM_DEVICE_ERROR, NM_DEVICE_ERROR_FAILED, "Invalid flags specified");
-        nm_audit_log_device_op(NM_AUDIT_OP_DEVICE_REAPPLY,
-                               self,
-                               FALSE,
-                               NULL,
-                               invocation,
-                               error->message);
-        g_dbus_method_invocation_take_error(invocation, error);
-        return;
-    }
-
-    if (priv->state < NM_DEVICE_STATE_PREPARE || priv->state > NM_DEVICE_STATE_ACTIVATED) {
-        error = g_error_new_literal(NM_DEVICE_ERROR,
-                                    NM_DEVICE_ERROR_NOT_ACTIVE,
-                                    "Device is not activated");
-        nm_audit_log_device_op(NM_AUDIT_OP_DEVICE_REAPPLY,
-                               self,
-                               FALSE,
-                               NULL,
-                               invocation,
-                               error->message);
-        g_dbus_method_invocation_take_error(invocation, error);
-        return;
-    }
-
-    settings_connection = nm_device_get_settings_connection(self);
-    g_return_if_fail(settings_connection);
-
-    if (settings && g_variant_n_children(settings)) {
-        /* New settings specified inline. */
-        connection = _nm_simple_connection_new_from_dbus(settings,
-                                                         NM_SETTING_PARSE_FLAGS_STRICT
-                                                             | NM_SETTING_PARSE_FLAGS_NORMALIZE,
-                                                         &error);
-        if (!connection) {
-            g_prefix_error(&error, "The settings specified are invalid: ");
-            nm_audit_log_device_op(NM_AUDIT_OP_DEVICE_REAPPLY,
-                                   self,
-                                   FALSE,
-                                   NULL,
-                                   invocation,
-                                   error->message);
-            g_dbus_method_invocation_take_error(invocation, error);
-            return;
-        }
-        nm_connection_clear_secrets(connection);
-    }
-
-    if (connection || version_id) {
-        reapply_data             = g_slice_new(ReapplyData);
-        reapply_data->connection = connection;
-        reapply_data->version_id = version_id;
-    } else
-        reapply_data = NULL;
-
-    nm_device_auth_request(self,
-                           invocation,
-                           nm_device_get_applied_connection(self),
-                           NM_AUTH_PERMISSION_NETWORK_CONTROL,
-                           TRUE,
-                           NULL,
-                           reapply_cb,
-                           reapply_data);
-}
-
-/*****************************************************************************/
-
-static void
-impl_device_get_applied_connection(NMDBusObject *                     obj,
-                                   const NMDBusInterfaceInfoExtended *interface_info,
-                                   const NMDBusMethodInfoExtended *   method_info,
-                                   GDBusConnection *                  connection,
-                                   const char *                       sender,
-                                   GDBusMethodInvocation *            invocation,
-                                   GVariant *                         parameters)
-{
-    NMDevice *       self       = NM_DEVICE(obj);
-    NMDevicePrivate *priv       = NM_DEVICE_GET_PRIVATE(self);
-    gs_free_error GError *error = NULL;
-    NMConnection *        applied_connection;
-    guint32               flags;
-    GVariant *            var_settings;
-
-    g_variant_get(parameters, "(u)", &flags);
-
-    /* No flags supported as of now. */
-    if (flags != 0) {
-        g_dbus_method_invocation_return_error_literal(invocation,
-                                                      NM_DEVICE_ERROR,
-                                                      NM_DEVICE_ERROR_FAILED,
-                                                      "Invalid flags specified");
-        return;
-    }
-
-    applied_connection = nm_device_get_applied_connection(self);
-    if (!applied_connection) {
-        g_dbus_method_invocation_return_error_literal(invocation,
-                                                      NM_DEVICE_ERROR,
-                                                      NM_DEVICE_ERROR_NOT_ACTIVE,
-                                                      "Device is not activated");
-        return;
-    }
-
-    if (!nm_auth_is_invocation_in_acl_set_error(applied_connection,
-                                                invocation,
-                                                NM_MANAGER_ERROR,
-                                                NM_MANAGER_ERROR_PERMISSION_DENIED,
-                                                NULL,
-                                                &error)) {
-        g_dbus_method_invocation_take_error(invocation, g_steal_pointer(&error));
-        return;
-    }
-
-    var_settings = nm_connection_to_dbus(applied_connection, NM_CONNECTION_SERIALIZE_NO_SECRETS);
-    if (!var_settings)
-        var_settings = g_variant_new_array(G_VARIANT_TYPE("{sa{sv}}"), NULL, 0);
-
-    g_dbus_method_invocation_return_value(
-        invocation,
-        g_variant_new(
-            "(@a{sa{sv}}t)",
-            var_settings,
-            nm_active_connection_version_id_get((NMActiveConnection *) priv->act_request.obj)));
-}
-
-/*****************************************************************************/
-
-typedef struct {
-    gint64 timestamp_ms;
-    bool   dirty;
-} IP6RoutesTemporaryNotAvailableData;
-
-static gboolean
-_rt6_temporary_not_available_timeout(gpointer user_data)
-{
-    NMDevice *       self = NM_DEVICE(user_data);
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    priv->rt6_temporary_not_available_id = 0;
-    nm_device_activate_schedule_ip_config_result(self, AF_INET6, NULL);
-
-    return G_SOURCE_REMOVE;
-}
-
-static gboolean
-_rt6_temporary_not_available_set(NMDevice *self, GPtrArray *temporary_not_available)
-{
-    NMDevicePrivate *                   priv = NM_DEVICE_GET_PRIVATE(self);
-    IP6RoutesTemporaryNotAvailableData *data;
-    GHashTableIter                      iter;
-    gint64                              now_ms, oldest_ms;
-    const gint64                        MAX_AGE_MS = 20000;
-    guint                               i;
-    gboolean                            success = TRUE;
-
-    if (!temporary_not_available || !temporary_not_available->len) {
-        /* nothing outstanding. Clear tracking the routes. */
-        nm_clear_pointer(&priv->rt6_temporary_not_available, g_hash_table_unref);
-        nm_clear_g_source(&priv->rt6_temporary_not_available_id);
-        return success;
-    }
-
-    if (priv->rt6_temporary_not_available) {
-        g_hash_table_iter_init(&iter, priv->rt6_temporary_not_available);
-        while (g_hash_table_iter_next(&iter, NULL, (gpointer *) &data))
-            data->dirty = TRUE;
-    } else {
-        priv->rt6_temporary_not_available =
-            g_hash_table_new_full((GHashFunc) nmp_object_id_hash,
-                                  (GEqualFunc) nmp_object_id_equal,
-                                  (GDestroyNotify) nmp_object_unref,
-                                  nm_g_slice_free_fcn(IP6RoutesTemporaryNotAvailableData));
-    }
-
-    now_ms    = nm_utils_get_monotonic_timestamp_msec();
-    oldest_ms = now_ms;
-
-    for (i = 0; i < temporary_not_available->len; i++) {
-        const NMPObject *o = temporary_not_available->pdata[i];
-
-        data = g_hash_table_lookup(priv->rt6_temporary_not_available, o);
-        if (data) {
-            if (!data->dirty)
-                continue;
-            data->dirty = FALSE;
-            nm_assert(data->timestamp_ms > 0 && data->timestamp_ms <= now_ms);
-            if (now_ms > data->timestamp_ms + MAX_AGE_MS) {
-                /* timeout. Could not add this address. */
-                _LOGW(LOGD_DEVICE,
-                      "failure to add IPv6 route: %s",
-                      nmp_object_to_string(o, NMP_OBJECT_TO_STRING_PUBLIC, NULL, 0));
-                success = FALSE;
-            } else
-                oldest_ms = MIN(data->timestamp_ms, oldest_ms);
-            continue;
-        }
-
-        data               = g_slice_new0(IP6RoutesTemporaryNotAvailableData);
-        data->timestamp_ms = now_ms;
-        g_hash_table_insert(priv->rt6_temporary_not_available, (gpointer) nmp_object_ref(o), data);
-    }
-
-    g_hash_table_iter_init(&iter, priv->rt6_temporary_not_available);
-    while (g_hash_table_iter_next(&iter, NULL, (gpointer *) &data)) {
-        if (data->dirty)
-            g_hash_table_iter_remove(&iter);
-    }
-
-    nm_clear_g_source(&priv->rt6_temporary_not_available_id);
-    priv->rt6_temporary_not_available_id =
-        g_timeout_add(oldest_ms + MAX_AGE_MS - now_ms, _rt6_temporary_not_available_timeout, self);
-
-    return success;
-}
-
-/*****************************************************************************/
-
-static void
-disconnect_cb(NMDevice *             self,
-              GDBusMethodInvocation *context,
-              NMAuthSubject *        subject,
-              GError *               error,
-              gpointer               user_data)
-{
-    NMDevicePrivate *priv  = NM_DEVICE_GET_PRIVATE(self);
-    GError *         local = NULL;
-
-    if (error) {
-        g_dbus_method_invocation_return_gerror(context, error);
-        nm_audit_log_device_op(NM_AUDIT_OP_DEVICE_DISCONNECT,
-                               self,
-                               FALSE,
-                               NULL,
-                               subject,
-                               error->message);
-        return;
-    }
-
-    /* Authorized */
-    if (priv->state <= NM_DEVICE_STATE_DISCONNECTED) {
-        local = g_error_new_literal(NM_DEVICE_ERROR,
-                                    NM_DEVICE_ERROR_NOT_ACTIVE,
-                                    "Device is not active");
-        nm_audit_log_device_op(NM_AUDIT_OP_DEVICE_DISCONNECT,
-                               self,
-                               FALSE,
-                               NULL,
-                               subject,
-                               local->message);
-        g_dbus_method_invocation_take_error(context, local);
-    } else {
-        nm_device_autoconnect_blocked_set(self, NM_DEVICE_AUTOCONNECT_BLOCKED_MANUAL_DISCONNECT);
-
-        nm_device_state_changed(self,
-                                NM_DEVICE_STATE_DEACTIVATING,
-                                NM_DEVICE_STATE_REASON_USER_REQUESTED);
-        g_dbus_method_invocation_return_value(context, NULL);
-        nm_audit_log_device_op(NM_AUDIT_OP_DEVICE_DISCONNECT, self, TRUE, NULL, subject, NULL);
-    }
-}
-
-static void
-_clear_queued_act_request(NMDevicePrivate *priv, NMActiveConnectionStateReason active_reason)
-{
-    if (priv->queued_act_request) {
-        gs_unref_object NMActRequest *ac = NULL;
-
-        ac = g_steal_pointer(&priv->queued_act_request);
-        nm_active_connection_set_state_fail((NMActiveConnection *) ac, active_reason, NULL);
-    }
-}
-
-static void
-impl_device_disconnect(NMDBusObject *                     obj,
-                       const NMDBusInterfaceInfoExtended *interface_info,
-                       const NMDBusMethodInfoExtended *   method_info,
-                       GDBusConnection *                  dbus_connection,
-                       const char *                       sender,
-                       GDBusMethodInvocation *            invocation,
-                       GVariant *                         parameters)
-{
-    NMDevice *       self = NM_DEVICE(obj);
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    NMConnection *   connection;
-
-    if (!priv->act_request.obj) {
-        g_dbus_method_invocation_return_error_literal(invocation,
-                                                      NM_DEVICE_ERROR,
-                                                      NM_DEVICE_ERROR_NOT_ACTIVE,
-                                                      "This device is not active");
-        return;
-    }
-
-    connection = nm_device_get_applied_connection(self);
-    nm_assert(connection);
-
-    nm_device_auth_request(self,
-                           invocation,
-                           connection,
-                           NM_AUTH_PERMISSION_NETWORK_CONTROL,
-                           TRUE,
-                           NULL,
-                           disconnect_cb,
-                           NULL);
-}
-
-static void
-delete_cb(NMDevice *             self,
-          GDBusMethodInvocation *context,
-          NMAuthSubject *        subject,
-          GError *               error,
-          gpointer               user_data)
-{
-    GError *local = NULL;
-
-    if (error) {
-        g_dbus_method_invocation_return_gerror(context, error);
-        nm_audit_log_device_op(NM_AUDIT_OP_DEVICE_DELETE,
-                               self,
-                               FALSE,
-                               NULL,
-                               subject,
-                               error->message);
-        return;
-    }
-
-    /* Authorized */
-    nm_audit_log_device_op(NM_AUDIT_OP_DEVICE_DELETE, self, TRUE, NULL, subject, NULL);
-    if (nm_device_unrealize(self, TRUE, &local))
-        g_dbus_method_invocation_return_value(context, NULL);
-    else
-        g_dbus_method_invocation_take_error(context, local);
-}
-
-static void
-impl_device_delete(NMDBusObject *                     obj,
-                   const NMDBusInterfaceInfoExtended *interface_info,
-                   const NMDBusMethodInfoExtended *   method_info,
-                   GDBusConnection *                  connection,
-                   const char *                       sender,
-                   GDBusMethodInvocation *            invocation,
-                   GVariant *                         parameters)
-{
-    NMDevice *self = NM_DEVICE(obj);
-
-    if (!nm_device_is_software(self) || !nm_device_is_real(self)) {
-        g_dbus_method_invocation_return_error_literal(
-            invocation,
-            NM_DEVICE_ERROR,
-            NM_DEVICE_ERROR_NOT_SOFTWARE,
-            "This device is not a software device or is not realized");
-        return;
-    }
-
-    nm_device_auth_request(self,
-                           invocation,
-                           NULL,
-                           NM_AUTH_PERMISSION_NETWORK_CONTROL,
-                           TRUE,
-                           NULL,
-                           delete_cb,
-                           NULL);
-}
-
-static void
-_device_activate(NMDevice *self, NMActRequest *req)
-{
-    NMConnection *connection;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-    g_return_if_fail(NM_IS_ACT_REQUEST(req));
-    nm_assert(nm_device_is_real(self));
-
-    /* Ensure the activation request is still valid; the master may have
-     * already failed in which case activation of this device should not proceed.
-     */
-    if (nm_active_connection_get_state(NM_ACTIVE_CONNECTION(req))
-        >= NM_ACTIVE_CONNECTION_STATE_DEACTIVATING)
-        return;
-
-    if (!nm_device_get_managed(self, FALSE)) {
-        /* It's unclear why the device would be unmanaged at this point.
-         * Just to be sure, handle it and error out. */
-        _LOGE(LOGD_DEVICE,
-              "Activation: failed activating connection '%s' because device is still unmanaged",
-              nm_active_connection_get_settings_connection_id((NMActiveConnection *) req));
-        nm_active_connection_set_state_fail((NMActiveConnection *) req,
-                                            NM_ACTIVE_CONNECTION_STATE_REASON_UNKNOWN,
-                                            NULL);
-        return;
-    }
-
-    connection = nm_act_request_get_applied_connection(req);
-    nm_assert(connection);
-
-    _LOGI(LOGD_DEVICE,
-          "Activation: starting connection '%s' (%s)",
-          nm_connection_get_id(connection),
-          nm_connection_get_uuid(connection));
-
-    delete_on_deactivate_unschedule(self);
-
-    act_request_set(self, req);
-
-    nm_device_activate_schedule_stage1_device_prepare(self, FALSE);
-}
-
-static void
-_carrier_wait_check_queued_act_request(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!priv->queued_act_request || !priv->queued_act_request_is_waiting_for_carrier)
-        return;
-
-    priv->queued_act_request_is_waiting_for_carrier = FALSE;
-    if (!priv->carrier) {
-        _LOGD(LOGD_DEVICE, "Cancel queued activation request as we have no carrier after timeout");
-        _clear_queued_act_request(priv, NM_ACTIVE_CONNECTION_STATE_REASON_DEVICE_DISCONNECTED);
-    } else if (priv->state == NM_DEVICE_STATE_DISCONNECTED) {
-        gs_unref_object NMActRequest *queued_req = NULL;
-
-        _LOGD(LOGD_DEVICE, "Activate queued activation request as we now have carrier");
-        queued_req = g_steal_pointer(&priv->queued_act_request);
-        _device_activate(self, queued_req);
-    }
-}
-
-static gboolean
-_carrier_wait_check_act_request_must_queue(NMDevice *self, NMActRequest *req)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    NMConnection *   connection;
-
-    /* If we have carrier or if we are not waiting for it, the activation
-     * request is not blocked waiting for carrier. */
-    if (priv->carrier)
-        return FALSE;
-    if (priv->carrier_wait_id == 0)
-        return FALSE;
-
-    connection = nm_act_request_get_applied_connection(req);
-    if (!connection_requires_carrier(connection))
-        return FALSE;
-
-    if (!nm_device_check_connection_available(self,
-                                              connection,
-                                              NM_DEVICE_CHECK_CON_AVAILABLE_ALL,
-                                              NULL,
-                                              NULL)) {
-        /* We passed all @flags we have, and no @specific_object.
-         * This equals maximal availability, if a connection is not available
-         * in this case, it is not waiting for carrier.
-         *
-         * Actually, why are we even trying to activate it? Strange, but whatever
-         * the reason, don't wait for carrier.
-         */
-        return FALSE;
-    }
-
-    if (nm_device_check_connection_available(
-            self,
-            connection,
-            NM_DEVICE_CHECK_CON_AVAILABLE_ALL
-                & ~_NM_DEVICE_CHECK_CON_AVAILABLE_FOR_USER_REQUEST_WAITING_CARRIER,
-            NULL,
-            NULL)) {
-        /* The connection was available with flags ALL, and it is still available
-         * if we pretend not to wait for carrier. That means that the
-         * connection is available now, and does not wait for carrier.
-         *
-         * Since the flags increase the availability of a connection, when checking
-         * ALL&~WAITING_CARRIER, it means that we certainly would wait for carrier. */
-        return FALSE;
-    }
-
-    /* The activation request must wait for carrier. */
-    return TRUE;
-}
-
-void
-nm_device_disconnect_active_connection(NMActiveConnection *          active,
-                                       NMDeviceStateReason           device_reason,
-                                       NMActiveConnectionStateReason active_reason)
-{
-    NMDevice *       self;
-    NMDevicePrivate *priv;
-
-    g_return_if_fail(NM_IS_ACTIVE_CONNECTION(active));
-
-    self = nm_active_connection_get_device(active);
-    if (!self) {
-        /* hm, no device? Just fail the active connection. */
-        goto do_fail;
-    }
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (NM_ACTIVE_CONNECTION(priv->queued_act_request) == active) {
-        _clear_queued_act_request(priv, active_reason);
-        return;
-    }
-
-    if (NM_ACTIVE_CONNECTION(priv->act_request.obj) == active) {
-        if (priv->state < NM_DEVICE_STATE_DEACTIVATING) {
-            nm_device_state_changed(self, NM_DEVICE_STATE_DEACTIVATING, device_reason);
-        } else {
-            /* @active is the current ac of @self, but it's going down already.
-             * Nothing to do. */
-        }
-        return;
-    }
-
-    /* the active connection references this device, but it's neither the
-     * queued_act_request nor the current act_request. Just set it to fail... */
-do_fail:
-    nm_active_connection_set_state_fail(active, active_reason, NULL);
-}
-
-void
-nm_device_queue_activation(NMDevice *self, NMActRequest *req)
-{
-    NMDevicePrivate *priv;
-    gboolean         must_queue;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-    g_return_if_fail(NM_IS_ACT_REQUEST(req));
-
-    nm_keep_alive_arm(nm_active_connection_get_keep_alive(NM_ACTIVE_CONNECTION(req)));
-
-    if (nm_active_connection_get_state(NM_ACTIVE_CONNECTION(req))
-        >= NM_ACTIVE_CONNECTION_STATE_DEACTIVATING) {
-        /* it's already deactivating. Nothing to do. */
-        nm_assert(
-            NM_IN_SET(nm_active_connection_get_device(NM_ACTIVE_CONNECTION(req)), NULL, self));
-        return;
-    }
-
-    nm_assert(self == nm_active_connection_get_device(NM_ACTIVE_CONNECTION(req)));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    must_queue = _carrier_wait_check_act_request_must_queue(self, req);
-
-    if (!priv->act_request.obj && !must_queue && nm_device_is_real(self)) {
-        _device_activate(self, req);
-        return;
-    }
-
-    /* supersede any already-queued request */
-    _clear_queued_act_request(priv, NM_ACTIVE_CONNECTION_STATE_REASON_DEVICE_DISCONNECTED);
-    priv->queued_act_request                        = g_object_ref(req);
-    priv->queued_act_request_is_waiting_for_carrier = must_queue;
-
-    _LOGD(LOGD_DEVICE,
-          "queue activation request waiting for %s",
-          must_queue ? "carrier" : "currently active connection to disconnect");
-
-    /* Deactivate existing activation request first */
-    if (priv->act_request.obj) {
-        _LOGI(LOGD_DEVICE, "disconnecting for new activation request.");
-        nm_device_state_changed(self,
-                                NM_DEVICE_STATE_DEACTIVATING,
-                                NM_DEVICE_STATE_REASON_NEW_ACTIVATION);
-    }
-}
-
-/*
- * nm_device_is_activating
- *
- * Return whether or not the device is currently activating itself.
- *
- */
-gboolean
-nm_device_is_activating(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    NMDeviceState    state;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    state = nm_device_get_state(self);
-    if (state >= NM_DEVICE_STATE_PREPARE && state <= NM_DEVICE_STATE_SECONDARIES)
-        return TRUE;
-
-    /* There's a small race between the time when stage 1 is scheduled
-     * and when the device actually sets STATE_PREPARE when the activation
-     * handler is actually run.  If there's an activation handler scheduled
-     * we're activating anyway.
-     */
-    return priv->activation_source_id_4 != 0;
-}
-
-NMProxyConfig *
-nm_device_get_proxy_config(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), NULL);
-
-    return NM_DEVICE_GET_PRIVATE(self)->proxy_config;
-}
-
-static void
-nm_device_set_proxy_config(NMDevice *self, const char *pac_url)
-{
-    NMDevicePrivate *priv;
-    NMConnection *   connection;
-    NMSettingProxy * s_proxy = NULL;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    g_clear_object(&priv->proxy_config);
-    priv->proxy_config = nm_proxy_config_new();
-
-    if (pac_url) {
-        nm_proxy_config_set_method(priv->proxy_config, NM_PROXY_CONFIG_METHOD_AUTO);
-        nm_proxy_config_set_pac_url(priv->proxy_config, pac_url);
-        _LOGD(LOGD_PROXY, "proxy: PAC url \"%s\"", pac_url);
-    } else
-        nm_proxy_config_set_method(priv->proxy_config, NM_PROXY_CONFIG_METHOD_NONE);
-
-    connection = nm_device_get_applied_connection(self);
-    if (connection)
-        s_proxy = nm_connection_get_setting_proxy(connection);
-
-    if (s_proxy)
-        nm_proxy_config_merge_setting(priv->proxy_config, s_proxy);
-}
-
-/* IP Configuration stuff */
-NMDhcpConfig *
-nm_device_get_dhcp_config(NMDevice *self, int addr_family)
-{
-    const gboolean IS_IPv4 = (addr_family == AF_INET);
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), NULL);
-
-    nm_assert_addr_family(addr_family);
-
-    return NM_DEVICE_GET_PRIVATE(self)->dhcp_data_x[IS_IPv4].config;
-}
-
-NMIP4Config *
-nm_device_get_ip4_config(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), NULL);
-
-    return NM_DEVICE_GET_PRIVATE(self)->ip_config_4;
-}
-
-static gboolean
-nm_device_set_ip_config(NMDevice *  self,
-                        int         addr_family,
-                        NMIPConfig *new_config,
-                        gboolean    commit,
-                        GPtrArray * ip4_dev_route_blacklist)
-{
-    NMDevicePrivate *     priv    = NM_DEVICE_GET_PRIVATE(self);
-    const gboolean        IS_IPv4 = (addr_family == AF_INET);
-    NMIPConfig *          old_config;
-    gboolean              has_changes = FALSE;
-    gboolean              success     = TRUE;
-    NMSettingsConnection *settings_connection;
-
-    nm_assert_addr_family(addr_family);
-    nm_assert(!new_config || nm_ip_config_get_addr_family(new_config) == addr_family);
-    nm_assert(!new_config
-              || (new_config && ({
-                      int ip_ifindex = nm_device_get_ip_ifindex(self);
-
-                      (ip_ifindex > 0 && ip_ifindex == nm_ip_config_get_ifindex(new_config));
-                  })));
-    nm_assert(IS_IPv4 || !ip4_dev_route_blacklist);
-
-    _LOGD(LOGD_IP_from_af(addr_family),
-          "ip%c-config: update (commit=%d, new-config=%p)",
-          nm_utils_addr_family_to_char(addr_family),
-          commit,
-          new_config);
-
-    /* Always commit to nm-platform to update lifetimes */
-    if (commit && new_config) {
-        _commit_mtu(self, IS_IPv4 ? NM_IP4_CONFIG(new_config) : priv->ip_config_4);
-
-        if (IS_IPv4) {
-            success = nm_ip4_config_commit(NM_IP4_CONFIG(new_config),
-                                           nm_device_get_platform(self),
-                                           _get_route_table_sync_mode_stateful(self, AF_INET));
-            nm_platform_ip4_dev_route_blacklist_set(nm_device_get_platform(self),
-                                                    nm_ip_config_get_ifindex(new_config),
-                                                    ip4_dev_route_blacklist);
-        } else {
-            gs_unref_ptrarray GPtrArray *temporary_not_available = NULL;
-
-            success = nm_ip6_config_commit(NM_IP6_CONFIG(new_config),
-                                           nm_device_get_platform(self),
-                                           _get_route_table_sync_mode_stateful(self, AF_INET6),
-                                           &temporary_not_available);
-
-            if (!_rt6_temporary_not_available_set(self, temporary_not_available))
-                success = FALSE;
-        }
-    }
-
-    old_config = priv->ip_config_x[IS_IPv4];
-
-    if (new_config && old_config) {
-        /* has_changes is set only on relevant changes, because when the configuration changes,
-         * this causes a re-read and reset. This should only happen for relevant changes */
-        nm_ip_config_replace(old_config, new_config, &has_changes);
-        if (has_changes) {
-            _LOGD(LOGD_IP_from_af(addr_family),
-                  "ip%c-config: update IP Config instance (%s)",
-                  nm_utils_addr_family_to_char(addr_family),
-                  nm_dbus_object_get_path(NM_DBUS_OBJECT(old_config)));
-        }
-    } else if (new_config /*&& !old_config*/) {
-        has_changes                = TRUE;
-        priv->ip_config_x[IS_IPv4] = g_object_ref(new_config);
-        if (!nm_dbus_object_is_exported(NM_DBUS_OBJECT(new_config)))
-            nm_dbus_object_export(NM_DBUS_OBJECT(new_config));
-
-        _LOGD(LOGD_IP_from_af(addr_family),
-              "ip%c-config: set IP Config instance (%s)",
-              nm_utils_addr_family_to_char(addr_family),
-              nm_dbus_object_get_path(NM_DBUS_OBJECT(new_config)));
-    } else if (old_config /*&& !new_config*/) {
-        has_changes                = TRUE;
-        priv->ip_config_x[IS_IPv4] = NULL;
-        _LOGD(LOGD_IP_from_af(addr_family),
-              "ip%c-config: clear IP Config instance (%s)",
-              nm_utils_addr_family_to_char(addr_family),
-              nm_dbus_object_get_path(NM_DBUS_OBJECT(old_config)));
-        if (IS_IPv4) {
-            /* Device config is invalid if combined config is invalid */
-            applied_config_clear(&priv->dev_ip_config_4);
-        } else
-            priv->needs_ip6_subnet = FALSE;
-    }
-
-    if (has_changes) {
-        if (old_config != priv->ip_config_x[IS_IPv4])
-            _notify(self, IS_IPv4 ? PROP_IP4_CONFIG : PROP_IP6_CONFIG);
-
-        g_signal_emit(self,
-                      signals[IS_IPv4 ? IP4_CONFIG_CHANGED : IP6_CONFIG_CHANGED],
-                      0,
-                      priv->ip_config_x[IS_IPv4],
-                      old_config);
-
-        if (old_config != priv->ip_config_x[IS_IPv4])
-            nm_dbus_object_clear_and_unexport(&old_config);
-
-        if (nm_device_sys_iface_state_is_external(self)
-            && (settings_connection = nm_device_get_settings_connection(self))
-            && NM_FLAGS_HAS(nm_settings_connection_get_flags(settings_connection),
-                            NM_SETTINGS_CONNECTION_INT_FLAGS_EXTERNAL)
-            && nm_active_connection_get_activation_type(NM_ACTIVE_CONNECTION(priv->act_request.obj))
-                   == NM_ACTIVATION_TYPE_EXTERNAL) {
-            gs_unref_object NMConnection *new_connection = NULL;
-
-            new_connection = nm_simple_connection_new_clone(
-                nm_settings_connection_get_connection(settings_connection));
-
-            nm_connection_add_setting(
-                new_connection,
-                IS_IPv4 ? nm_ip4_config_create_setting(priv->ip_config_4)
-                        : nm_ip6_config_create_setting(priv->ip_config_6,
-                                                       _get_maybe_ipv6_disabled(self)));
-
-            nm_settings_connection_update(settings_connection,
-                                          new_connection,
-                                          NM_SETTINGS_CONNECTION_PERSIST_MODE_IN_MEMORY,
-                                          NM_SETTINGS_CONNECTION_INT_FLAGS_NONE,
-                                          NM_SETTINGS_CONNECTION_INT_FLAGS_NONE,
-                                          NM_SETTINGS_CONNECTION_UPDATE_REASON_NONE,
-                                          "update-external",
-                                          NULL);
-        }
-
-        nm_device_queue_recheck_assume(self);
-
-        if (!IS_IPv4) {
-            if (priv->ndisc)
-                ndisc_set_router_config(priv->ndisc, self);
-        }
-    }
-
-    nm_assert(!old_config || old_config == priv->ip_config_x[IS_IPv4]);
-
-    return success;
-}
-
-static gboolean
-_replace_vpn_config_in_list(GSList **plist, GObject *old, GObject *new)
-{
-    GSList *old_link;
-
-    /* Below, assert that @new is not yet tracked, but still behave
-     * correctly in any case. Don't complain for missing @old since
-     * it could have been removed when the parent device became
-     * unmanaged. */
-
-    if (old && (old_link = g_slist_find(*plist, old))) {
-        if (old != new) {
-            if (new)
-                old_link->data = g_object_ref(new);
-            else
-                *plist = g_slist_delete_link(*plist, old_link);
-            g_object_unref(old);
-        }
-        return TRUE;
-    }
-
-    if (new) {
-        if (!g_slist_find(*plist, new))
-            *plist = g_slist_append(*plist, g_object_ref(new));
-        else
-            g_return_val_if_reached(TRUE);
-        return TRUE;
-    }
-
-    return FALSE;
-}
-
-void
-nm_device_replace_vpn4_config(NMDevice *self, NMIP4Config *old, NMIP4Config *config)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    nm_assert(!old || NM_IS_IP4_CONFIG(old));
-    nm_assert(!config || NM_IS_IP4_CONFIG(config));
-    nm_assert(!old || nm_ip4_config_get_ifindex(old) == nm_device_get_ip_ifindex(self));
-    nm_assert(!config || nm_ip4_config_get_ifindex(config) == nm_device_get_ip_ifindex(self));
-
-    if (!_replace_vpn_config_in_list(&priv->vpn_configs_4, (GObject *) old, (GObject *) config))
-        return;
-
-    /* NULL to use existing configs */
-    if (!ip_config_merge_and_apply(self, AF_INET, TRUE))
-        _LOGW(LOGD_IP4, "failed to set VPN routes for device");
-}
-
-void
-nm_device_set_dev2_ip_config(NMDevice *self, int addr_family, NMIPConfig *config)
-{
-    NMDevicePrivate *priv;
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-    g_return_if_fail(NM_IN_SET(addr_family, AF_INET, AF_INET6));
-    g_return_if_fail(!config || nm_ip_config_get_addr_family(config) == addr_family);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    applied_config_init(&priv->dev2_ip_config_x[IS_IPv4], config);
-    if (!ip_config_merge_and_apply(self, addr_family, TRUE)) {
-        _LOGW(LOGD_IP,
-              "failed to set extra device IPv%c configuration",
-              nm_utils_addr_family_to_char(addr_family));
-    }
-}
-
-void
-nm_device_replace_vpn6_config(NMDevice *self, NMIP6Config *old, NMIP6Config *config)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    nm_assert(!old || NM_IS_IP6_CONFIG(old));
-    nm_assert(!config || NM_IS_IP6_CONFIG(config));
-    nm_assert(!old || nm_ip6_config_get_ifindex(old) == nm_device_get_ip_ifindex(self));
-    nm_assert(!config || nm_ip6_config_get_ifindex(config) == nm_device_get_ip_ifindex(self));
-
-    if (!_replace_vpn_config_in_list(&priv->vpn_configs_6, (GObject *) old, (GObject *) config))
-        return;
-
-    /* NULL to use existing configs */
-    if (!ip_config_merge_and_apply(self, AF_INET6, TRUE))
-        _LOGW(LOGD_IP6, "failed to set VPN routes for device");
-}
-
-NMIP6Config *
-nm_device_get_ip6_config(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), NULL);
-
-    return NM_DEVICE_GET_PRIVATE(self)->ip_config_6;
-}
-
-/*****************************************************************************/
-
-static gboolean
-dispatcher_cleanup(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!priv->dispatcher.call_id)
-        return FALSE;
-
-    nm_dispatcher_call_cancel(g_steal_pointer(&priv->dispatcher.call_id));
-    priv->dispatcher.post_state        = NM_DEVICE_STATE_UNKNOWN;
-    priv->dispatcher.post_state_reason = NM_DEVICE_STATE_REASON_NONE;
-    return TRUE;
-}
-
-static void
-dispatcher_complete_proceed_state(NMDispatcherCallId *call_id, gpointer user_data)
-{
-    NMDevice *       self = NM_DEVICE(user_data);
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    g_return_if_fail(call_id == priv->dispatcher.call_id);
-
-    priv->dispatcher.call_id = NULL;
-    nm_device_queue_state(self, priv->dispatcher.post_state, priv->dispatcher.post_state_reason);
-    priv->dispatcher.post_state        = NM_DEVICE_STATE_UNKNOWN;
-    priv->dispatcher.post_state_reason = NM_DEVICE_STATE_REASON_NONE;
-}
-
-/*****************************************************************************/
-
-static void
-ip_check_pre_up(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (dispatcher_cleanup(self))
-        nm_assert_not_reached();
-
-    priv->dispatcher.post_state        = NM_DEVICE_STATE_SECONDARIES;
-    priv->dispatcher.post_state_reason = NM_DEVICE_STATE_REASON_NONE;
-    if (!nm_dispatcher_call_device(NM_DISPATCHER_ACTION_PRE_UP,
-                                   self,
-                                   NULL,
-                                   dispatcher_complete_proceed_state,
-                                   self,
-                                   &priv->dispatcher.call_id)) {
-        /* Just proceed on errors */
-        dispatcher_complete_proceed_state(0, self);
-    }
-}
-
-static void
-ip_check_gw_ping_cleanup(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    nm_clear_g_source(&priv->gw_ping.watch);
-    nm_clear_g_source(&priv->gw_ping.timeout);
-
-    if (priv->gw_ping.pid) {
-        nm_utils_kill_child_async(priv->gw_ping.pid,
-                                  SIGTERM,
-                                  priv->gw_ping.log_domain,
-                                  "ping",
-                                  1000,
-                                  NULL,
-                                  NULL);
-        priv->gw_ping.pid = 0;
-    }
-
-    nm_clear_g_free(&priv->gw_ping.binary);
-    nm_clear_g_free(&priv->gw_ping.address);
-}
-
-static gboolean
-spawn_ping(NMDevice *self)
-{
-    NMDevicePrivate *priv        = NM_DEVICE_GET_PRIVATE(self);
-    gs_free char *   str_timeout = NULL;
-    gs_free char *   tmp_str     = NULL;
-    const char *     args[]      = {priv->gw_ping.binary,
-                          "-I",
-                          nm_device_get_ip_iface(self),
-                          "-c",
-                          "1",
-                          "-w",
-                          NULL,
-                          priv->gw_ping.address,
-                          NULL};
-    gs_free_error GError *error  = NULL;
-    gboolean              ret;
-
-    args[6] = str_timeout = g_strdup_printf("%u", priv->gw_ping.deadline);
-    tmp_str               = g_strjoinv(" ", (char **) args);
-    _LOGD(priv->gw_ping.log_domain, "ping: running '%s'", tmp_str);
-
-    ret = g_spawn_async("/",
-                        (char **) args,
-                        NULL,
-                        G_SPAWN_DO_NOT_REAP_CHILD,
-                        NULL,
-                        NULL,
-                        &priv->gw_ping.pid,
-                        &error);
-
-    if (!ret) {
-        _LOGW(priv->gw_ping.log_domain,
-              "ping: could not spawn %s: %s",
-              priv->gw_ping.binary,
-              error->message);
-    }
-
-    return ret;
-}
-
-static gboolean
-respawn_ping_cb(gpointer user_data)
-{
-    NMDevice *       self = NM_DEVICE(user_data);
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    priv->gw_ping.watch = 0;
-
-    if (spawn_ping(self)) {
-        priv->gw_ping.watch = g_child_watch_add(priv->gw_ping.pid, ip_check_ping_watch_cb, self);
-    } else {
-        ip_check_gw_ping_cleanup(self);
-        ip_check_pre_up(self);
-    }
-
-    return FALSE;
-}
-
-static void
-ip_check_ping_watch_cb(GPid pid, int status, gpointer user_data)
-{
-    NMDevice *       self       = NM_DEVICE(user_data);
-    NMDevicePrivate *priv       = NM_DEVICE_GET_PRIVATE(self);
-    NMLogDomain      log_domain = priv->gw_ping.log_domain;
-    gboolean         success    = FALSE;
-
-    if (!priv->gw_ping.watch)
-        return;
-    priv->gw_ping.watch = 0;
-    priv->gw_ping.pid   = 0;
-
-    if (WIFEXITED(status)) {
-        if (WEXITSTATUS(status) == 0) {
-            _LOGD(log_domain, "ping: gateway ping succeeded");
-            success = TRUE;
-        } else {
-            _LOGW(log_domain, "ping: gateway ping failed with error code %d", WEXITSTATUS(status));
-        }
-    } else
-        _LOGW(log_domain, "ping: stopped unexpectedly with status %d", status);
-
-    if (success) {
-        /* We've got connectivity, proceed to pre_up */
-        ip_check_gw_ping_cleanup(self);
-        ip_check_pre_up(self);
-    } else {
-        /* If ping exited with an error it may have returned early,
-         * wait 1 second and restart it */
-        priv->gw_ping.watch = g_timeout_add_seconds(1, respawn_ping_cb, self);
-    }
-}
-
-static gboolean
-ip_check_ping_timeout_cb(gpointer user_data)
-{
-    NMDevice *       self = NM_DEVICE(user_data);
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    priv->gw_ping.timeout = 0;
-
-    _LOGW(priv->gw_ping.log_domain, "ping: gateway ping timed out");
-
-    ip_check_gw_ping_cleanup(self);
-    ip_check_pre_up(self);
-    return FALSE;
-}
-
-static gboolean
-start_ping(NMDevice *  self,
-           NMLogDomain log_domain,
-           const char *binary,
-           const char *address,
-           guint       timeout)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    g_return_val_if_fail(priv->gw_ping.watch == 0, FALSE);
-    g_return_val_if_fail(priv->gw_ping.timeout == 0, FALSE);
-
-    priv->gw_ping.log_domain = log_domain;
-    priv->gw_ping.address    = g_strdup(address);
-    priv->gw_ping.binary     = g_strdup(binary);
-    priv->gw_ping.deadline   = timeout + 10; /* the proper termination is enforced by a timer */
-
-    if (spawn_ping(self)) {
-        priv->gw_ping.watch   = g_child_watch_add(priv->gw_ping.pid, ip_check_ping_watch_cb, self);
-        priv->gw_ping.timeout = g_timeout_add_seconds(timeout, ip_check_ping_timeout_cb, self);
-        return TRUE;
-    }
-
-    ip_check_gw_ping_cleanup(self);
-    return FALSE;
-}
-
-static void
-nm_device_start_ip_check(NMDevice *self)
-{
-    NMDevicePrivate *    priv = NM_DEVICE_GET_PRIVATE(self);
-    NMConnection *       connection;
-    NMSettingConnection *s_con;
-    guint                timeout     = 0;
-    const char *         ping_binary = NULL;
-    char                 buf[NM_UTILS_INET_ADDRSTRLEN];
-    NMLogDomain          log_domain = LOGD_IP4;
-
-    /* Shouldn't be any active ping here, since IP_CHECK happens after the
-     * first IP method completes.  Any subsequently completing IP method doesn't
-     * get checked.
-     */
-    g_return_if_fail(!priv->gw_ping.watch);
-    g_return_if_fail(!priv->gw_ping.timeout);
-    g_return_if_fail(!priv->gw_ping.pid);
-    g_return_if_fail(priv->ip_state_4 == NM_DEVICE_IP_STATE_DONE
-                     || priv->ip_state_6 == NM_DEVICE_IP_STATE_DONE);
-
-    connection = nm_device_get_applied_connection(self);
-    g_assert(connection);
-
-    s_con = nm_connection_get_setting_connection(connection);
-    g_assert(s_con);
-    timeout = nm_setting_connection_get_gateway_ping_timeout(s_con);
-
-    buf[0] = '\0';
-    if (timeout) {
-        const NMPObject *gw;
-
-        if (priv->ip_config_4 && priv->ip_state_4 == NM_DEVICE_IP_STATE_DONE) {
-            gw = nm_ip4_config_best_default_route_get(priv->ip_config_4);
-            if (gw) {
-                _nm_utils_inet4_ntop(NMP_OBJECT_CAST_IP4_ROUTE(gw)->gateway, buf);
-                ping_binary = nm_utils_find_helper("ping", "/usr/bin/ping", NULL);
-                log_domain  = LOGD_IP4;
-            }
-        } else if (priv->ip_config_6 && priv->ip_state_6 == NM_DEVICE_IP_STATE_DONE) {
-            gw = nm_ip6_config_best_default_route_get(priv->ip_config_6);
-            if (gw) {
-                _nm_utils_inet6_ntop(&NMP_OBJECT_CAST_IP6_ROUTE(gw)->gateway, buf);
-                ping_binary = nm_utils_find_helper("ping6", "/usr/bin/ping6", NULL);
-                log_domain  = LOGD_IP6;
-            }
-        }
-    }
-
-    if (buf[0])
-        start_ping(self, log_domain, ping_binary, buf, timeout);
-
-    /* If no ping was started, just advance to pre_up */
-    if (!priv->gw_ping.pid)
-        ip_check_pre_up(self);
-}
-
-/*****************************************************************************/
-
-static gboolean
-carrier_wait_timeout(gpointer user_data)
-{
-    NMDevice *       self = NM_DEVICE(user_data);
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    priv->carrier_wait_id = 0;
-    nm_device_remove_pending_action(self, NM_PENDING_ACTION_CARRIER_WAIT, FALSE);
-    if (!priv->carrier)
-        _carrier_wait_check_queued_act_request(self);
-    return G_SOURCE_REMOVE;
-}
-
-static gboolean
-nm_device_is_up(NMDevice *self)
-{
-    int ifindex;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    ifindex = nm_device_get_ip_ifindex(self);
-    return ifindex > 0 ? nm_platform_link_is_up(nm_device_get_platform(self), ifindex) : TRUE;
-}
-
-static gint64
-_get_carrier_wait_ms(NMDevice *self)
-{
-    gs_free char *value = NULL;
-
-    value = nm_config_data_get_device_config(NM_CONFIG_GET_DATA,
-                                             NM_CONFIG_KEYFILE_KEY_DEVICE_CARRIER_WAIT_TIMEOUT,
-                                             self,
-                                             NULL);
-    return _nm_utils_ascii_str_to_int64(value, 10, 0, G_MAXINT32, CARRIER_WAIT_TIME_MS);
-}
-
-gboolean
-nm_device_bring_up(NMDevice *self, gboolean block, gboolean *no_firmware)
-{
-    NMDevicePrivate *    priv         = NM_DEVICE_GET_PRIVATE(self);
-    gboolean             device_is_up = FALSE;
-    NMDeviceCapabilities capabilities;
-    int                  ifindex;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    NM_SET_OUT(no_firmware, FALSE);
-
-    if (!nm_device_get_enabled(self)) {
-        _LOGD(LOGD_PLATFORM, "bringing up device ignored due to disabled");
-        return FALSE;
-    }
-
-    ifindex = nm_device_get_ip_ifindex(self);
-    _LOGD(LOGD_PLATFORM, "bringing up device %d", ifindex);
-    if (ifindex <= 0) {
-        /* assume success. */
-    } else {
-        if (!nm_platform_link_set_up(nm_device_get_platform(self), ifindex, no_firmware))
-            return FALSE;
-    }
-
-    /* Store carrier immediately. */
-    nm_device_set_carrier_from_platform(self);
-
-    device_is_up = nm_device_is_up(self);
-    if (block && !device_is_up) {
-        gint64 wait_until = nm_utils_get_monotonic_timestamp_usec() + 10000 /* microseconds */;
-
-        do {
-            g_usleep(200);
-            if (!nm_platform_link_refresh(nm_device_get_platform(self), ifindex))
-                return FALSE;
-            device_is_up = nm_device_is_up(self);
-        } while (!device_is_up && nm_utils_get_monotonic_timestamp_usec() < wait_until);
-    }
-
-    if (!device_is_up) {
-        if (block)
-            _LOGW(LOGD_PLATFORM, "device not up after timeout!");
-        else
-            _LOGD(LOGD_PLATFORM, "device not up immediately");
-        return FALSE;
-    }
-
-    /* some ethernet devices fail to report capabilities unless the device
-     * is up. Re-read the capabilities. */
-    capabilities = 0;
-    if (NM_DEVICE_GET_CLASS(self)->get_generic_capabilities)
-        capabilities |= NM_DEVICE_GET_CLASS(self)->get_generic_capabilities(self);
-    _add_capabilities(self, capabilities);
-
-    /* Devices that support carrier detect must be IFF_UP to report carrier
-     * changes; so after setting the device IFF_UP we must suppress startup
-     * complete (via a pending action) until either the carrier turns on, or
-     * a timeout is reached.
-     */
-    if (nm_device_has_capability(self, NM_DEVICE_CAP_CARRIER_DETECT)) {
-        gint64 now_ms, until_ms;
-
-        /* we start a grace period of 5 seconds during which we will schedule
-         * a pending action whenever we have no carrier.
-         *
-         * If during that time carrier goes away, we declare the interface
-         * as not ready. */
-        nm_clear_g_source(&priv->carrier_wait_id);
-        if (!priv->carrier)
-            nm_device_add_pending_action(self, NM_PENDING_ACTION_CARRIER_WAIT, FALSE);
-
-        now_ms   = nm_utils_get_monotonic_timestamp_msec();
-        until_ms = NM_MAX(now_ms + _get_carrier_wait_ms(self), priv->carrier_wait_until_ms);
-        priv->carrier_wait_id = g_timeout_add(until_ms - now_ms, carrier_wait_timeout, self);
-    }
-
-    /* Can only get HW address of some devices when they are up */
-    nm_device_update_hw_address(self);
-
-    /* when the link comes up, we must restore IP configuration if necessary. */
-    if (priv->ip_state_4 == NM_DEVICE_IP_STATE_DONE) {
-        if (!ip_config_merge_and_apply(self, AF_INET, TRUE))
-            _LOGW(LOGD_IP4, "failed applying IP4 config after bringing link up");
-    }
-    if (priv->ip_state_6 == NM_DEVICE_IP_STATE_DONE) {
-        if (!ip_config_merge_and_apply(self, AF_INET6, TRUE))
-            _LOGW(LOGD_IP6, "failed applying IP6 config after bringing link up");
-    }
-
-    return TRUE;
-}
-
-void
-nm_device_take_down(NMDevice *self, gboolean block)
-{
-    int      ifindex;
-    gboolean device_is_up;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    ifindex = nm_device_get_ip_ifindex(self);
-    _LOGD(LOGD_PLATFORM, "taking down device %d", ifindex);
-    if (ifindex <= 0) {
-        /* devices without ifindex are always up. */
-        return;
-    }
-
-    if (!nm_platform_link_set_down(nm_device_get_platform(self), ifindex))
-        return;
-
-    device_is_up = nm_device_is_up(self);
-    if (block && device_is_up) {
-        gint64 wait_until = nm_utils_get_monotonic_timestamp_usec() + 10000 /* microseconds */;
-
-        do {
-            g_usleep(200);
-            if (!nm_platform_link_refresh(nm_device_get_platform(self), ifindex))
-                return;
-            device_is_up = nm_device_is_up(self);
-        } while (device_is_up && nm_utils_get_monotonic_timestamp_usec() < wait_until);
-    }
-
-    if (device_is_up) {
-        if (block)
-            _LOGW(LOGD_PLATFORM, "device not down after timeout!");
-        else
-            _LOGD(LOGD_PLATFORM, "device not down immediately");
-    }
-}
-
-void
-nm_device_set_firmware_missing(NMDevice *self, gboolean new_missing)
-{
-    NMDevicePrivate *priv;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-    if (priv->firmware_missing != new_missing) {
-        priv->firmware_missing = new_missing;
-        _notify(self, PROP_FIRMWARE_MISSING);
-    }
-}
-
-gboolean
-nm_device_get_firmware_missing(NMDevice *self)
-{
-    return NM_DEVICE_GET_PRIVATE(self)->firmware_missing;
-}
-
-static void
-intersect_ext_config(NMDevice *     self,
-                     AppliedConfig *config,
-                     gboolean       intersect_addresses,
-                     gboolean       intersect_routes)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    NMIPConfig *     ext;
-    guint32          penalty;
-    int              family;
-
-    if (!config->orig)
-        return;
-
-    family  = nm_ip_config_get_addr_family(config->orig);
-    penalty = default_route_metric_penalty_get(self, family);
-    ext     = family == AF_INET ? (NMIPConfig *) priv->ext_ip_config_4
-                                : (NMIPConfig *) priv->ext_ip_config_6;
-
-    if (config->current) {
-        nm_ip_config_intersect(config->current,
-                               ext,
-                               intersect_addresses,
-                               intersect_routes,
-                               penalty);
-    } else {
-        config->current = nm_ip_config_intersect_alloc(config->orig,
-                                                       ext,
-                                                       intersect_addresses,
-                                                       intersect_routes,
-                                                       penalty);
-    }
-}
-
-static gboolean
-update_ext_ip_config(NMDevice *self, int addr_family, gboolean intersect_configs)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    int              ifindex;
-    GSList *         iter;
-    gboolean         is_up;
-
-    nm_assert_addr_family(addr_family);
-
-    ifindex = nm_device_get_ip_ifindex(self);
-    if (!ifindex)
-        return FALSE;
-
-    is_up = nm_platform_link_is_up(nm_device_get_platform(self), ifindex);
-
-    if (addr_family == AF_INET) {
-        g_clear_object(&priv->ext_ip_config_4);
-        priv->ext_ip_config_4 = nm_ip4_config_capture(nm_device_get_multi_index(self),
-                                                      nm_device_get_platform(self),
-                                                      ifindex);
-        if (priv->ext_ip_config_4) {
-            if (intersect_configs) {
-                /* This function was called upon external changes. Remove the configuration
-                 * (addresses,routes) that is no longer present externally from the internal
-                 * config. This way, we don't re-add addresses that were manually removed
-                 * by the user. */
-                if (priv->con_ip_config_4) {
-                    nm_ip4_config_intersect(priv->con_ip_config_4,
-                                            priv->ext_ip_config_4,
-                                            TRUE,
-                                            is_up,
-                                            default_route_metric_penalty_get(self, AF_INET));
-                }
-
-                intersect_ext_config(self, &priv->dev_ip_config_4, TRUE, is_up);
-                intersect_ext_config(self, &priv->dev2_ip_config_4, TRUE, is_up);
-
-                for (iter = priv->vpn_configs_4; iter; iter = iter->next)
-                    nm_ip4_config_intersect(iter->data, priv->ext_ip_config_4, TRUE, is_up, 0);
-            }
-
-            /* Remove parts from ext_ip_config_4 to only contain the information that
-             * was configured externally -- we already have the same configuration from
-             * internal origins. */
-            if (priv->con_ip_config_4) {
-                nm_ip4_config_subtract(priv->ext_ip_config_4,
-                                       priv->con_ip_config_4,
-                                       default_route_metric_penalty_get(self, AF_INET));
-            }
-            if (applied_config_get_current(&priv->dev_ip_config_4)) {
-                nm_ip_config_subtract((NMIPConfig *) priv->ext_ip_config_4,
-                                      applied_config_get_current(&priv->dev_ip_config_4),
-                                      default_route_metric_penalty_get(self, AF_INET));
-            }
-            if (applied_config_get_current(&priv->dev2_ip_config_4)) {
-                nm_ip_config_subtract((NMIPConfig *) priv->ext_ip_config_4,
-                                      applied_config_get_current(&priv->dev2_ip_config_4),
-                                      default_route_metric_penalty_get(self, AF_INET));
-            }
-            for (iter = priv->vpn_configs_4; iter; iter = iter->next)
-                nm_ip4_config_subtract(priv->ext_ip_config_4, iter->data, 0);
-        }
-
-    } else {
-        nm_assert(addr_family == AF_INET6);
-
-        g_clear_object(&priv->ext_ip_config_6);
-        g_clear_object(&priv->ext_ip6_config_captured);
-        priv->ext_ip6_config_captured =
-            nm_ip6_config_capture(nm_device_get_multi_index(self),
-                                  nm_device_get_platform(self),
-                                  ifindex,
-                                  NM_SETTING_IP6_CONFIG_PRIVACY_UNKNOWN);
-        if (priv->ext_ip6_config_captured) {
-            priv->ext_ip_config_6 = nm_ip6_config_new_cloned(priv->ext_ip6_config_captured);
-
-            if (intersect_configs) {
-                /* This function was called upon external changes. Remove the configuration
-                 * (addresses,routes) that is no longer present externally from the internal
-                 * config. This way, we don't re-add addresses that were manually removed
-                 * by the user. */
-                if (priv->con_ip_config_6) {
-                    nm_ip6_config_intersect(priv->con_ip_config_6,
-                                            priv->ext_ip_config_6,
-                                            is_up,
-                                            is_up,
-                                            default_route_metric_penalty_get(self, AF_INET6));
-                }
-
-                intersect_ext_config(self, &priv->ac_ip6_config, is_up, is_up);
-                intersect_ext_config(self, &priv->dhcp6.ip6_config, is_up, is_up);
-                intersect_ext_config(self, &priv->dev2_ip_config_6, is_up, is_up);
-
-                for (iter = priv->vpn_configs_6; iter; iter = iter->next)
-                    nm_ip6_config_intersect(iter->data, priv->ext_ip_config_6, is_up, is_up, 0);
-
-                if (is_up && priv->ipv6ll_has
-                    && !nm_ip6_config_lookup_address(priv->ext_ip_config_6, &priv->ipv6ll_addr))
-                    priv->ipv6ll_has = FALSE;
-            }
-
-            /* Remove parts from ext_ip_config_6 to only contain the information that
-             * was configured externally -- we already have the same configuration from
-             * internal origins. */
-            if (priv->con_ip_config_6) {
-                nm_ip6_config_subtract(priv->ext_ip_config_6,
-                                       priv->con_ip_config_6,
-                                       default_route_metric_penalty_get(self, AF_INET6));
-            }
-            if (applied_config_get_current(&priv->ac_ip6_config)) {
-                nm_ip_config_subtract((NMIPConfig *) priv->ext_ip_config_6,
-                                      applied_config_get_current(&priv->ac_ip6_config),
-                                      default_route_metric_penalty_get(self, AF_INET6));
-            }
-            if (applied_config_get_current(&priv->dhcp6.ip6_config)) {
-                nm_ip_config_subtract((NMIPConfig *) priv->ext_ip_config_6,
-                                      applied_config_get_current(&priv->dhcp6.ip6_config),
-                                      default_route_metric_penalty_get(self, AF_INET6));
-            }
-            if (applied_config_get_current(&priv->dev2_ip_config_6)) {
-                nm_ip_config_subtract((NMIPConfig *) priv->ext_ip_config_6,
-                                      applied_config_get_current(&priv->dev2_ip_config_6),
-                                      default_route_metric_penalty_get(self, AF_INET6));
-            }
-            for (iter = priv->vpn_configs_6; iter; iter = iter->next)
-                nm_ip6_config_subtract(priv->ext_ip_config_6, iter->data, 0);
-        }
-    }
-
-    return TRUE;
-}
-
-static void
-update_ip_config(NMDevice *self, int addr_family)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    nm_assert_addr_family(addr_family);
-
-    if (addr_family == AF_INET)
-        priv->update_ip_config_completed_v4 = TRUE;
-    else
-        priv->update_ip_config_completed_v6 = TRUE;
-
-    if (update_ext_ip_config(self, addr_family, TRUE)) {
-        if (addr_family == AF_INET) {
-            if (priv->ext_ip_config_4)
-                ip_config_merge_and_apply(self, AF_INET, FALSE);
-        } else {
-            if (priv->ext_ip6_config_captured)
-                ip_config_merge_and_apply(self, AF_INET6, FALSE);
-        }
-    }
-}
-
-void
-nm_device_capture_initial_config(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!priv->update_ip_config_completed_v4)
-        update_ip_config(self, AF_INET);
-    if (!priv->update_ip_config_completed_v6)
-        update_ip_config(self, AF_INET6);
-}
-
-static gboolean
-queued_ip_config_change(NMDevice *self, int addr_family)
-{
-    NMDevicePrivate *priv;
-    const gboolean   IS_IPv4 = (addr_family == AF_INET);
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), G_SOURCE_REMOVE);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    /* Wait for any queued state changes */
-    if (priv->queued_state.id)
-        return G_SOURCE_CONTINUE;
-
-    /* If a commit is scheduled, this function would potentially interfere with
-     * it changing IP configurations before they are applied. Postpone the
-     * update in such case.
-     */
-    if (priv->activation_source_id_x[IS_IPv4] != 0
-        && priv->activation_source_func_x[IS_IPv4] == activate_stage5_ip_config_result_x[IS_IPv4])
-        return G_SOURCE_CONTINUE;
-
-    priv->queued_ip_config_id_x[IS_IPv4] = 0;
-
-    update_ip_config(self, addr_family);
-
-    if (!IS_IPv4) {
-        /* Check whether we need to complete waiting for link-local.
-         * We are also called from an idle handler, so no problem doing state transitions
-         * now. */
-        linklocal6_check_complete(self);
-    }
-
-    if (!IS_IPv4) {
-        NMPlatform *          platform;
-        GSList *              dad6_failed_addrs, *iter;
-        const NMPlatformLink *pllink;
-
-        dad6_failed_addrs = g_steal_pointer(&priv->dad6_failed_addrs);
-
-        if (priv->state > NM_DEVICE_STATE_DISCONNECTED && priv->state < NM_DEVICE_STATE_DEACTIVATING
-            && priv->ifindex > 0 && !nm_device_sys_iface_state_is_external(self)
-            && (platform = nm_device_get_platform(self))
-            && (pllink = nm_platform_link_get(platform, priv->ifindex))
-            && (pllink->n_ifi_flags & IFF_UP)) {
-            gboolean         need_ipv6ll          = FALSE;
-            NMNDiscConfigMap ndisc_config_changed = NM_NDISC_CONFIG_NONE;
-
-            /* Handle DAD failures */
-            for (iter = dad6_failed_addrs; iter; iter = iter->next) {
-                const NMPObject *           obj = iter->data;
-                const NMPlatformIP6Address *addr;
-
-                if (!nm_ndisc_dad_addr_is_fail_candidate(platform, obj))
-                    continue;
-
-                addr = NMP_OBJECT_CAST_IP6_ADDRESS(obj);
-
-                _LOGI(LOGD_IP6,
-                      "ipv6: duplicate address check failed for the %s address",
-                      nm_platform_ip6_address_to_string(addr, NULL, 0));
-
-                if (IN6_IS_ADDR_LINKLOCAL(&addr->address))
-                    need_ipv6ll = TRUE;
-                else if (priv->ndisc)
-                    ndisc_config_changed |= nm_ndisc_dad_failed(priv->ndisc, &addr->address, FALSE);
-            }
-
-            if (ndisc_config_changed != NM_NDISC_CONFIG_NONE)
-                nm_ndisc_emit_config_change(priv->ndisc, ndisc_config_changed);
-
-            /* If no IPv6 link-local address exists but other addresses do then we
-             * must add the LL address to remain conformant with RFC 3513 chapter 2.1
-             * ("Addressing Model"): "All interfaces are required to have at least
-             * one link-local unicast address".
-             */
-            if (priv->ip_config_6 && nm_ip6_config_get_num_addresses(priv->ip_config_6))
-                need_ipv6ll = TRUE;
-            if (need_ipv6ll)
-                check_and_add_ipv6ll_addr(self);
-        }
-
-        g_slist_free_full(dad6_failed_addrs, (GDestroyNotify) nmp_object_unref);
-    }
-
-    if (!IS_IPv4) {
-        /* Check if DAD is still pending */
-        if (priv->ip_state_6 == NM_DEVICE_IP_STATE_CONF && priv->dad6_ip6_config
-            && priv->ext_ip6_config_captured
-            && !nm_ip6_config_has_any_dad_pending(priv->ext_ip6_config_captured,
-                                                  priv->dad6_ip6_config)) {
-            _LOGD(LOGD_DEVICE | LOGD_IP6, "IPv6 DAD terminated");
-            g_clear_object(&priv->dad6_ip6_config);
-            _set_ip_state(self, addr_family, NM_DEVICE_IP_STATE_DONE);
-            check_ip_state(self, FALSE, TRUE);
-            if (priv->rt6_temporary_not_available)
-                nm_device_activate_schedule_ip_config_result(self, AF_INET6, NULL);
-        }
-    }
-
-    set_unmanaged_external_down(self, TRUE);
-
-    return G_SOURCE_REMOVE;
-}
-
-static gboolean
-queued_ip4_config_change(gpointer user_data)
-{
-    return queued_ip_config_change(user_data, AF_INET);
-}
-
-static gboolean
-queued_ip6_config_change(gpointer user_data)
-{
-    return queued_ip_config_change(user_data, AF_INET6);
-}
-
-static void
-device_ipx_changed(NMPlatform *  platform,
-                   int           obj_type_i,
-                   int           ifindex,
-                   gconstpointer platform_object,
-                   int           change_type_i,
-                   NMDevice *    self)
-{
-    const NMPObjectType              obj_type    = obj_type_i;
-    const NMPlatformSignalChangeType change_type = change_type_i;
-    NMDevicePrivate *                priv;
-    const NMPlatformIP6Address *     addr;
-
-    if (nm_device_get_ip_ifindex(self) != ifindex)
-        return;
-
-    if (!nm_device_is_real(self))
-        return;
-
-    if (nm_device_get_unmanaged_flags(self, NM_UNMANAGED_PLATFORM_INIT)) {
-        /* ignore all platform signals until the link is initialized in platform. */
-        return;
-    }
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    switch (obj_type) {
-    case NMP_OBJECT_TYPE_IP4_ADDRESS:
-    case NMP_OBJECT_TYPE_IP4_ROUTE:
-        if (!priv->queued_ip_config_id_4) {
-            priv->queued_ip_config_id_4 = g_idle_add(queued_ip4_config_change, self);
-            _LOGD(LOGD_DEVICE, "queued IP4 config change");
-        }
-        break;
-    case NMP_OBJECT_TYPE_IP6_ADDRESS:
-        addr = platform_object;
-
-        if (priv->state > NM_DEVICE_STATE_DISCONNECTED && priv->state < NM_DEVICE_STATE_DEACTIVATING
-            && nm_ndisc_dad_addr_is_fail_candidate_event(change_type, addr)) {
-            priv->dad6_failed_addrs =
-                g_slist_prepend(priv->dad6_failed_addrs,
-                                (gpointer) nmp_object_ref(NMP_OBJECT_UP_CAST(addr)));
-        }
-
-        /* fall-through */
-    case NMP_OBJECT_TYPE_IP6_ROUTE:
-        if (!priv->queued_ip_config_id_6) {
-            priv->queued_ip_config_id_6 = g_idle_add(queued_ip6_config_change, self);
-            _LOGD(LOGD_DEVICE, "queued IP6 config change");
-        }
-        break;
-    default:
-        g_return_if_reached();
-    }
-}
-
-/*****************************************************************************/
-
-NM_UTILS_FLAGS2STR_DEFINE(nm_unmanaged_flags2str,
-                          NMUnmanagedFlags,
-                          NM_UTILS_FLAGS2STR(NM_UNMANAGED_SLEEPING, "sleeping"),
-                          NM_UTILS_FLAGS2STR(NM_UNMANAGED_QUITTING, "quitting"),
-                          NM_UTILS_FLAGS2STR(NM_UNMANAGED_PARENT, "parent"),
-                          NM_UTILS_FLAGS2STR(NM_UNMANAGED_BY_TYPE, "by-type"),
-                          NM_UTILS_FLAGS2STR(NM_UNMANAGED_PLATFORM_INIT, "platform-init"),
-                          NM_UTILS_FLAGS2STR(NM_UNMANAGED_USER_EXPLICIT, "user-explicit"),
-                          NM_UTILS_FLAGS2STR(NM_UNMANAGED_BY_DEFAULT, "by-default"),
-                          NM_UTILS_FLAGS2STR(NM_UNMANAGED_USER_SETTINGS, "user-settings"),
-                          NM_UTILS_FLAGS2STR(NM_UNMANAGED_USER_CONF, "user-conf"),
-                          NM_UTILS_FLAGS2STR(NM_UNMANAGED_USER_UDEV, "user-udev"),
-                          NM_UTILS_FLAGS2STR(NM_UNMANAGED_EXTERNAL_DOWN, "external-down"),
-                          NM_UTILS_FLAGS2STR(NM_UNMANAGED_IS_SLAVE, "is-slave"), );
-
-static const char *
-_unmanaged_flags2str(NMUnmanagedFlags flags, NMUnmanagedFlags mask, char *buf, gsize len)
-{
-    char  buf2[512];
-    char *b;
-    char *tmp, *tmp2;
-    gsize l;
-
-    nm_utils_to_string_buffer_init(&buf, &len);
-    if (!len)
-        return buf;
-
-    b = buf;
-
-    mask |= flags;
-
-    nm_unmanaged_flags2str(flags, b, len);
-    l = strlen(b);
-    b += l;
-    len -= l;
-
-    nm_unmanaged_flags2str(mask & ~flags, buf2, sizeof(buf2));
-    if (buf2[0]) {
-        gboolean add_separator = l > 0;
-
-        tmp = buf2;
-        while (TRUE) {
-            if (add_separator)
-                nm_utils_strbuf_append_c(&b, &len, ',');
-            add_separator = TRUE;
-
-            tmp2 = strchr(tmp, ',');
-            if (tmp2)
-                tmp2[0] = '\0';
-
-            nm_utils_strbuf_append_c(&b, &len, '!');
-            nm_utils_strbuf_append_str(&b, &len, tmp);
-            if (!tmp2)
-                break;
-
-            tmp = &tmp2[1];
-        }
-    }
-
-    return buf;
-}
-
-static gboolean
-_get_managed_by_flags(NMUnmanagedFlags flags, NMUnmanagedFlags mask, gboolean for_user_request)
-{
-    /* Evaluate the managed state based on the unmanaged flags.
-     *
-     * Some flags are authoritative, meaning they always cause
-     * the device to be unmanaged (e.g. @NM_UNMANAGED_PLATFORM_INIT).
-     *
-     * OTOH, some flags can be overwritten. For example NM_UNMANAGED_USER_UDEV
-     * is ignored once NM_UNMANAGED_USER_EXPLICIT is set. The idea is that
-     * the flag from the configuration has no effect once the user explicitly
-     * touches the unmanaged flags. */
-
-    if (for_user_request) {
-        /* @for_user_request can make the result only ~more~ managed.
-         * If the flags already indicate a managed state for a non-user-request,
-         * then it is also managed for an explicit user-request.
-         *
-         * Effectively, this check is redundant, as the code below already
-         * already ensures that. Still, express this invariant explicitly here. */
-        if (_get_managed_by_flags(flags, mask, FALSE))
-            return TRUE;
-
-        /* A for-user-request, is effectively the same as pretending
-         * that user-explicit flag is cleared. */
-        mask |= NM_UNMANAGED_USER_EXPLICIT;
-        flags &= ~NM_UNMANAGED_USER_EXPLICIT;
-    }
-
-    if (NM_FLAGS_ANY(mask, NM_UNMANAGED_USER_SETTINGS)
-        && !NM_FLAGS_ANY(flags, NM_UNMANAGED_USER_SETTINGS)) {
-        /* NM_UNMANAGED_USER_SETTINGS can only explicitly unmanage a device. It cannot
-         * *manage* it. Having NM_UNMANAGED_USER_SETTINGS explicitly not set, is the
-         * same as having it not set at all. */
-        mask &= ~NM_UNMANAGED_USER_SETTINGS;
-    }
-
-    if (NM_FLAGS_ANY(mask, NM_UNMANAGED_USER_UDEV)) {
-        /* configuration from udev or nm-config overwrites the by-default flag
-         * which is based on the device type.
-         * configuration from udev overwrites external-down */
-        flags &= ~(NM_UNMANAGED_BY_DEFAULT | NM_UNMANAGED_EXTERNAL_DOWN);
-    }
-
-    if (NM_FLAGS_ANY(mask, NM_UNMANAGED_USER_CONF)) {
-        /* configuration from NetworkManager.conf overwrites the by-default flag
-         * which is based on the device type.
-         * It also overwrites the udev configuration and external-down */
-        flags &= ~(NM_UNMANAGED_BY_DEFAULT | NM_UNMANAGED_USER_UDEV | NM_UNMANAGED_EXTERNAL_DOWN);
-    }
-
-    if (NM_FLAGS_HAS(mask, NM_UNMANAGED_IS_SLAVE) && !NM_FLAGS_HAS(flags, NM_UNMANAGED_IS_SLAVE)) {
-        /* for an enslaved device, by-default doesn't matter */
-        flags &= ~NM_UNMANAGED_BY_DEFAULT;
-    }
-
-    if (NM_FLAGS_HAS(mask, NM_UNMANAGED_USER_EXPLICIT)) {
-        /* if the device is managed by user-decision, certain other flags
-         * are ignored. */
-        flags &= ~(NM_UNMANAGED_BY_DEFAULT | NM_UNMANAGED_USER_UDEV | NM_UNMANAGED_USER_CONF
-                   | NM_UNMANAGED_EXTERNAL_DOWN);
-    }
-
-    return flags == NM_UNMANAGED_NONE;
-}
-
-/**
- * nm_device_get_managed:
- * @self: the #NMDevice
- * @for_user_request: whether to check the flags for an explicit user-request
- *   Setting this to %TRUE has the same effect as if %NM_UNMANAGED_USER_EXPLICIT
- *   unmanaged flag would be unset (meaning: explicitly not-unmanaged).
- *   If this parameter is %TRUE, the device can only appear more managed.
- *
- * Whether the device is unmanaged according to the unmanaged flags.
- *
- * Returns: %TRUE if the device is unmanaged because of the flags.
- */
-gboolean
-nm_device_get_managed(NMDevice *self, gboolean for_user_request)
-{
-    NMDevicePrivate *priv;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    if (!nm_device_is_real(self)) {
-        /* a unrealized device is always considered unmanaged. */
-        return FALSE;
-    }
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    return _get_managed_by_flags(priv->unmanaged_flags, priv->unmanaged_mask, for_user_request);
-}
-
-/**
- * nm_device_get_unmanaged_mask:
- * @self: the #NMDevice
- * @flag: the unmanaged flags to check.
- *
- * Return the unmanaged flags mask set on this device.
- *
- * Returns: the flags of the device ( & @flag)
- */
-NMUnmanagedFlags
-nm_device_get_unmanaged_mask(NMDevice *self, NMUnmanagedFlags flag)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), NM_UNMANAGED_NONE);
-    g_return_val_if_fail(flag != NM_UNMANAGED_NONE, NM_UNMANAGED_NONE);
-
-    return NM_DEVICE_GET_PRIVATE(self)->unmanaged_mask & flag;
-}
-
-/**
- * nm_device_get_unmanaged_flags:
- * @self: the #NMDevice
- * @flag: the unmanaged flags to check.
- *
- * Return the unmanaged flags of the device.
- *
- * Returns: the flags of the device ( & @flag)
- */
-NMUnmanagedFlags
-nm_device_get_unmanaged_flags(NMDevice *self, NMUnmanagedFlags flag)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), NM_UNMANAGED_NONE);
-    g_return_val_if_fail(flag != NM_UNMANAGED_NONE, NM_UNMANAGED_NONE);
-
-    return NM_DEVICE_GET_PRIVATE(self)->unmanaged_flags & flag;
-}
-
-/**
- * _set_unmanaged_flags:
- * @self: the #NMDevice instance
- * @flags: which #NMUnmanagedFlags to set.
- * @set_op: whether to set/clear/forget the flags. You can also pass
- *   boolean values %TRUE and %FALSE, which mean %NM_UNMAN_FLAG_OP_SET_UNMANAGED
- *   and %NM_UNMAN_FLAG_OP_SET_MANAGED, respectively.
- * @allow_state_transition: if %FALSE, setting flags never triggers a device
- *   state change. If %TRUE, the device can change state, if it is real and
- *   switches from managed to unmanaged (or vice versa).
- * @now: whether the state change should be immediate or delayed
- * @reason: the device state reason passed to nm_device_state_changed() if
- *   the device becomes managed/unmanaged. This is only relevant if the
- *   device switches state and if @allow_state_transition is %TRUE.
- *
- * Set the unmanaged flags of the device.
- **/
-static void
-_set_unmanaged_flags(NMDevice *          self,
-                     NMUnmanagedFlags    flags,
-                     NMUnmanFlagOp       set_op,
-                     gboolean            allow_state_transition,
-                     gboolean            now,
-                     NMDeviceStateReason reason)
-{
-    NMDevicePrivate *priv;
-    gboolean         was_managed, transition_state;
-    NMUnmanagedFlags old_flags, old_mask;
-    NMDeviceState    new_state;
-    const char *     operation = NULL;
-    char             str1[512];
-    char             str2[512];
-    gboolean         do_notify_has_pending_actions = FALSE;
-    gboolean         had_pending_actions           = FALSE;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-    g_return_if_fail(flags);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!priv->real)
-        allow_state_transition = FALSE;
-    was_managed = allow_state_transition && nm_device_get_managed(self, FALSE);
-
-    if (NM_FLAGS_HAS(priv->unmanaged_flags, NM_UNMANAGED_PLATFORM_INIT)
-        && NM_FLAGS_HAS(flags, NM_UNMANAGED_PLATFORM_INIT)
-        && NM_IN_SET(set_op, NM_UNMAN_FLAG_OP_SET_MANAGED)) {
-        /* we are clearing the platform-init flags. This triggers additional actions. */
-        if (!NM_FLAGS_HAS(flags, NM_UNMANAGED_USER_SETTINGS)) {
-            gboolean unmanaged;
-
-            unmanaged = nm_device_spec_match_list(
-                self,
-                nm_settings_get_unmanaged_specs(NM_DEVICE_GET_PRIVATE(self)->settings));
-            nm_device_set_unmanaged_flags(self, NM_UNMANAGED_USER_SETTINGS, !!unmanaged);
-        }
-
-        /* trigger an initial update of IP configuration. */
-        nm_assert_se(!nm_clear_g_source(&priv->queued_ip_config_id_4));
-        nm_assert_se(!nm_clear_g_source(&priv->queued_ip_config_id_6));
-        priv->queued_ip_config_id_4 = g_idle_add(queued_ip4_config_change, self);
-        priv->queued_ip_config_id_6 = g_idle_add(queued_ip6_config_change, self);
-
-        if (!priv->pending_actions) {
-            do_notify_has_pending_actions = TRUE;
-            had_pending_actions           = nm_device_has_pending_action(self);
-        }
-    }
-
-    old_flags = priv->unmanaged_flags;
-    old_mask  = priv->unmanaged_mask;
-
-    switch (set_op) {
-    case NM_UNMAN_FLAG_OP_FORGET:
-        priv->unmanaged_mask &= ~flags;
-        priv->unmanaged_flags &= ~flags;
-        operation = "forget";
-        break;
-    case NM_UNMAN_FLAG_OP_SET_UNMANAGED:
-        priv->unmanaged_mask |= flags;
-        priv->unmanaged_flags |= flags;
-        operation = "set-unmanaged";
-        break;
-    case NM_UNMAN_FLAG_OP_SET_MANAGED:
-        priv->unmanaged_mask |= flags;
-        priv->unmanaged_flags &= ~flags;
-        operation = "set-managed";
-        break;
-    default:
-        g_return_if_reached();
-    }
-
-    if (old_flags == priv->unmanaged_flags && old_mask == priv->unmanaged_mask)
-        return;
-
-    transition_state =
-        allow_state_transition && was_managed != nm_device_get_managed(self, FALSE)
-        && (was_managed
-            || (!was_managed && nm_device_get_state(self) == NM_DEVICE_STATE_UNMANAGED));
-
-    _LOGD(LOGD_DEVICE,
-          "unmanaged: flags set to [%s%s0x%0x/0x%x/%s%s], %s [%s=0x%0x]%s%s%s)",
-          _unmanaged_flags2str(priv->unmanaged_flags, priv->unmanaged_mask, str1, sizeof(str1)),
-          (priv->unmanaged_flags | priv->unmanaged_mask) ? "=" : "",
-          (guint) priv->unmanaged_flags,
-          (guint) priv->unmanaged_mask,
-          (_get_managed_by_flags(priv->unmanaged_flags, priv->unmanaged_mask, FALSE)
-               ? "managed"
-               : (_get_managed_by_flags(priv->unmanaged_flags, priv->unmanaged_mask, TRUE)
-                      ? "manageable"
-                      : "unmanaged")),
-          priv->real ? "" : "/unrealized",
-          operation,
-          nm_unmanaged_flags2str(flags, str2, sizeof(str2)),
-          flags,
-          NM_PRINT_FMT_QUOTED(allow_state_transition,
-                              ", reason ",
-                              reason_to_string_a(reason),
-                              transition_state ? ", transition-state" : "",
-                              ""));
-
-    if (do_notify_has_pending_actions && had_pending_actions != nm_device_has_pending_action(self))
-        _notify(self, PROP_HAS_PENDING_ACTION);
-
-    if (transition_state) {
-        new_state = was_managed ? NM_DEVICE_STATE_UNMANAGED : NM_DEVICE_STATE_UNAVAILABLE;
-        if (now)
-            nm_device_state_changed(self, new_state, reason);
-        else
-            nm_device_queue_state(self, new_state, reason);
-    }
-}
-
-/**
- * @self: the #NMDevice instance
- * @flags: which #NMUnmanagedFlags to set.
- * @set_op: whether to set/clear/forget the flags. You can also pass
- *   boolean values %TRUE and %FALSE, which mean %NM_UNMAN_FLAG_OP_SET_UNMANAGED
- *   and %NM_UNMAN_FLAG_OP_SET_MANAGED, respectively.
- *
- * Set the unmanaged flags of the device (does not trigger a state change).
- **/
-void
-nm_device_set_unmanaged_flags(NMDevice *self, NMUnmanagedFlags flags, NMUnmanFlagOp set_op)
-{
-    _set_unmanaged_flags(self, flags, set_op, FALSE, FALSE, NM_DEVICE_STATE_REASON_NONE);
-}
-
-/**
- * nm_device_set_unmanaged_by_flags:
- * @self: the #NMDevice instance
- * @flags: which #NMUnmanagedFlags to set.
- * @set_op: whether to set/clear/forget the flags. You can also pass
- *   boolean values %TRUE and %FALSE, which mean %NM_UNMAN_FLAG_OP_SET_UNMANAGED
- *   and %NM_UNMAN_FLAG_OP_SET_MANAGED, respectively.
- * @reason: the device state reason passed to nm_device_state_changed() if
- *   the device becomes managed/unmanaged.
- *
- * Set the unmanaged flags of the device and possibly trigger a state change.
- **/
-void
-nm_device_set_unmanaged_by_flags(NMDevice *          self,
-                                 NMUnmanagedFlags    flags,
-                                 NMUnmanFlagOp       set_op,
-                                 NMDeviceStateReason reason)
-{
-    _set_unmanaged_flags(self, flags, set_op, TRUE, TRUE, reason);
-}
-
-void
-nm_device_set_unmanaged_by_flags_queue(NMDevice *          self,
-                                       NMUnmanagedFlags    flags,
-                                       NMUnmanFlagOp       set_op,
-                                       NMDeviceStateReason reason)
-{
-    _set_unmanaged_flags(self, flags, set_op, TRUE, FALSE, reason);
-}
-
-/**
- * nm_device_check_unrealized_device_managed:
- *
- * Checks if a unrealized device is managed from user settings
- * or user configuration.
- */
-gboolean
-nm_device_check_unrealized_device_managed(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    nm_assert(!nm_device_is_real(self));
-
-    if (!nm_config_data_get_device_config_boolean(NM_CONFIG_GET_DATA,
-                                                  NM_CONFIG_KEYFILE_KEY_DEVICE_MANAGED,
-                                                  self,
-                                                  TRUE,
-                                                  TRUE))
-        return FALSE;
-
-    if (nm_device_spec_match_list(self, nm_settings_get_unmanaged_specs(priv->settings)))
-        return FALSE;
-
-    return TRUE;
-}
-
-void
-nm_device_set_unmanaged_by_user_settings(NMDevice *self)
-{
-    gboolean unmanaged;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    if (nm_device_get_unmanaged_flags(self, NM_UNMANAGED_PLATFORM_INIT)) {
-        /* the device is already unmanaged due to platform-init.
-         *
-         * We want to delay evaluating the device spec, because it will freeze
-         * the permanent MAC address. That should not be done, before the platform
-         * link is fully initialized (via UDEV).
-         *
-         * Note that when clearing NM_UNMANAGED_PLATFORM_INIT, we will re-evaluate
-         * whether the device is unmanaged by user-settings. */
-        return;
-    }
-
-    unmanaged = nm_device_spec_match_list(
-        self,
-        nm_settings_get_unmanaged_specs(NM_DEVICE_GET_PRIVATE(self)->settings));
-
-    nm_device_set_unmanaged_by_flags(self,
-                                     NM_UNMANAGED_USER_SETTINGS,
-                                     !!unmanaged,
-                                     unmanaged ? NM_DEVICE_STATE_REASON_NOW_UNMANAGED
-                                               : NM_DEVICE_STATE_REASON_NOW_MANAGED);
-}
-
-void
-nm_device_set_unmanaged_by_user_udev(NMDevice *self)
-{
-    int      ifindex;
-    gboolean platform_unmanaged = FALSE;
-
-    ifindex = self->_priv->ifindex;
-
-    if (ifindex <= 0
-        || !nm_platform_link_get_unmanaged(nm_device_get_platform(self),
-                                           ifindex,
-                                           &platform_unmanaged))
-        return;
-
-    nm_device_set_unmanaged_by_flags(self,
-                                     NM_UNMANAGED_USER_UDEV,
-                                     platform_unmanaged,
-                                     NM_DEVICE_STATE_REASON_USER_REQUESTED);
-}
-
-void
-nm_device_set_unmanaged_by_user_conf(NMDevice *self)
-{
-    gboolean      value;
-    NMUnmanFlagOp set_op;
-
-    value = nm_config_data_get_device_config_boolean(NM_CONFIG_GET_DATA,
-                                                     NM_CONFIG_KEYFILE_KEY_DEVICE_MANAGED,
-                                                     self,
-                                                     -1,
-                                                     TRUE);
-    switch (value) {
-    case TRUE:
-        set_op = NM_UNMAN_FLAG_OP_SET_MANAGED;
-        break;
-    case FALSE:
-        set_op = NM_UNMAN_FLAG_OP_SET_UNMANAGED;
-        break;
-    default:
-        set_op = NM_UNMAN_FLAG_OP_FORGET;
-        break;
-    }
-
-    nm_device_set_unmanaged_by_flags(self,
-                                     NM_UNMANAGED_USER_CONF,
-                                     set_op,
-                                     NM_DEVICE_STATE_REASON_USER_REQUESTED);
-}
-
-void
-nm_device_set_unmanaged_by_quitting(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    gboolean         need_deactivate =
-        nm_device_is_activating(self) || priv->state == NM_DEVICE_STATE_ACTIVATED;
-
-    /* It's OK to block here because we're quitting */
-    if (need_deactivate)
-        _set_state_full(self,
-                        NM_DEVICE_STATE_DEACTIVATING,
-                        NM_DEVICE_STATE_REASON_NOW_UNMANAGED,
-                        TRUE);
-
-    nm_device_set_unmanaged_by_flags(self,
-                                     NM_UNMANAGED_QUITTING,
-                                     TRUE,
-                                     need_deactivate ? NM_DEVICE_STATE_REASON_REMOVED
-                                                     : NM_DEVICE_STATE_REASON_NOW_UNMANAGED);
-}
-
-/*****************************************************************************/
-
-void
-nm_device_set_dhcp_anycast_address(NMDevice *self, const char *addr)
-{
-    NMDevicePrivate *priv;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-    g_return_if_fail(!addr || nm_utils_hwaddr_valid(addr, ETH_ALEN));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    g_free(priv->dhcp_anycast_address);
-    priv->dhcp_anycast_address = g_strdup(addr);
-}
-
-void
-nm_device_reapply_settings_immediately(NMDevice *self)
-{
-    NMConnection *        applied_connection;
-    NMSettingsConnection *settings_connection;
-    NMDeviceState         state;
-    NMSettingConnection * s_con_settings;
-    NMSettingConnection * s_con_applied;
-    const char *          zone;
-    NMMetered             metered;
-    guint64               version_id;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    state = nm_device_get_state(self);
-    if (state <= NM_DEVICE_STATE_DISCONNECTED || state > NM_DEVICE_STATE_ACTIVATED)
-        return;
-
-    applied_connection  = nm_device_get_applied_connection(self);
-    settings_connection = nm_device_get_settings_connection(self);
-
-    if (!nm_settings_connection_has_unmodified_applied_connection(
-            settings_connection,
-            applied_connection,
-            NM_SETTING_COMPARE_FLAG_IGNORE_REAPPLY_IMMEDIATELY))
-        return;
-
-    s_con_settings = nm_connection_get_setting_connection(
-        nm_settings_connection_get_connection(settings_connection));
-    s_con_applied = nm_connection_get_setting_connection(applied_connection);
-
-    if (!nm_streq0((zone = nm_setting_connection_get_zone(s_con_settings)),
-                   nm_setting_connection_get_zone(s_con_applied))) {
-        version_id = nm_active_connection_version_id_bump(
-            (NMActiveConnection *) self->_priv->act_request.obj);
-        _LOGD(LOGD_DEVICE,
-              "reapply setting: zone = %s%s%s (version-id %llu)",
-              NM_PRINT_FMT_QUOTE_STRING(zone),
-              (unsigned long long) version_id);
-
-        g_object_set(G_OBJECT(s_con_applied), NM_SETTING_CONNECTION_ZONE, zone, NULL);
-
-        nm_device_update_firewall_zone(self);
-    }
-
-    if ((metered = nm_setting_connection_get_metered(s_con_settings))
-        != nm_setting_connection_get_metered(s_con_applied)) {
-        version_id = nm_active_connection_version_id_bump(
-            (NMActiveConnection *) self->_priv->act_request.obj);
-        _LOGD(LOGD_DEVICE,
-              "reapply setting: metered = %d (version-id %llu)",
-              (int) metered,
-              (unsigned long long) version_id);
-
-        g_object_set(G_OBJECT(s_con_applied), NM_SETTING_CONNECTION_METERED, metered, NULL);
-
-        nm_device_update_metered(self);
-    }
-}
-
-void
-nm_device_update_firewall_zone(NMDevice *self)
-{
-    NMDevicePrivate *priv;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->fw_state >= FIREWALL_STATE_INITIALIZED
-        && !nm_device_sys_iface_state_is_external(self))
-        fw_change_zone(self);
-}
-
-void
-nm_device_update_metered(NMDevice *self)
-{
-#define NM_METERED_INVALID ((NMMetered) -1)
-    NMDevicePrivate *    priv = NM_DEVICE_GET_PRIVATE(self);
-    NMSettingConnection *setting;
-    NMMetered            conn_value, value = NM_METERED_INVALID;
-    NMConnection *       connection = NULL;
-    NMDeviceState        state;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    state = nm_device_get_state(self);
-    if (state <= NM_DEVICE_STATE_DISCONNECTED || state > NM_DEVICE_STATE_ACTIVATED)
-        value = NM_METERED_UNKNOWN;
-
-    if (value == NM_METERED_INVALID) {
-        connection = nm_device_get_applied_connection(self);
-        if (connection) {
-            setting = nm_connection_get_setting_connection(connection);
-            if (setting) {
-                conn_value = nm_setting_connection_get_metered(setting);
-                if (conn_value != NM_METERED_UNKNOWN)
-                    value = conn_value;
-            }
-        }
-    }
-
-    if (value == NM_METERED_INVALID && NM_DEVICE_GET_CLASS(self)->get_guessed_metered
-        && NM_DEVICE_GET_CLASS(self)->get_guessed_metered(self))
-        value = NM_METERED_GUESS_YES;
-
-    /* Try to guess a value using the metered flag in IP configuration */
-    if (value == NM_METERED_INVALID) {
-        if (priv->ip_config_4 && priv->ip_state_4 == NM_DEVICE_IP_STATE_DONE
-            && nm_ip4_config_get_metered(priv->ip_config_4))
-            value = NM_METERED_GUESS_YES;
-    }
-
-    /* Otherwise, look at connection type. For Bluetooth, we look at the type of
-     * Bluetooth sharing: for PANU/DUN (where we are receiving internet from
-     * another device) we set GUESS_YES; for NAP (where we are sharing internet
-     * to another device) we set GUESS_NO. We ignore WiMAX here as it’s no
-     * longer supported by NetworkManager. */
-    if (value == NM_METERED_INVALID
-        && nm_connection_is_type(connection, NM_SETTING_BLUETOOTH_SETTING_NAME)) {
-        if (_nm_connection_get_setting_bluetooth_for_nap(connection)) {
-            /* NAP types are not metered, but other types are. */
-            value = NM_METERED_GUESS_NO;
-        } else
-            value = NM_METERED_GUESS_YES;
-    }
-
-    if (value == NM_METERED_INVALID) {
-        if (nm_connection_is_type(connection, NM_SETTING_GSM_SETTING_NAME)
-            || nm_connection_is_type(connection, NM_SETTING_CDMA_SETTING_NAME))
-            value = NM_METERED_GUESS_YES;
-        else
-            value = NM_METERED_GUESS_NO;
-    }
-
-    if (value != priv->metered) {
-        _LOGD(LOGD_DEVICE, "set metered value %d", value);
-        priv->metered = value;
-        _notify(self, PROP_METERED);
-    }
-}
-
-static NMDeviceCheckDevAvailableFlags
-_device_check_dev_available_flags_from_con(NMDeviceCheckConAvailableFlags con_flags)
-{
-    NMDeviceCheckDevAvailableFlags dev_flags;
-
-    dev_flags = NM_DEVICE_CHECK_DEV_AVAILABLE_NONE;
-
-    if (NM_FLAGS_HAS(con_flags, _NM_DEVICE_CHECK_CON_AVAILABLE_FOR_USER_REQUEST_WAITING_CARRIER))
-        dev_flags |= _NM_DEVICE_CHECK_DEV_AVAILABLE_IGNORE_CARRIER;
-
-    return dev_flags;
-}
-
-static gboolean
-_nm_device_check_connection_available(NMDevice *                     self,
-                                      NMConnection *                 connection,
-                                      NMDeviceCheckConAvailableFlags flags,
-                                      const char *                   specific_object,
-                                      GError **                      error)
-{
-    NMDeviceState state;
-    GError *      local = NULL;
-
-    /* an unrealized software device is always available, hardware devices never. */
-    if (!nm_device_is_real(self)) {
-        if (nm_device_is_software(self)) {
-            if (!nm_device_check_connection_compatible(self, connection, error ? &local : NULL)) {
-                if (error) {
-                    g_return_val_if_fail(local, FALSE);
-                    nm_utils_error_set(error,
-                                       local->domain == NM_UTILS_ERROR ? local->code
-                                                                       : NM_UTILS_ERROR_UNKNOWN,
-                                       "profile is not compatible with software device (%s)",
-                                       local->message);
-                    g_error_free(local);
-                }
-                return FALSE;
-            }
-            return TRUE;
-        }
-        nm_utils_error_set_literal(error,
-                                   NM_UTILS_ERROR_CONNECTION_AVAILABLE_UNMANAGED_DEVICE,
-                                   "hardware device is not realized");
-        return FALSE;
-    }
-
-    state = nm_device_get_state(self);
-    if (state < NM_DEVICE_STATE_UNMANAGED) {
-        nm_utils_error_set_literal(error,
-                                   NM_UTILS_ERROR_CONNECTION_AVAILABLE_UNMANAGED_DEVICE,
-                                   "device is in unknown state");
-        return FALSE;
-    }
-    if (state < NM_DEVICE_STATE_UNAVAILABLE) {
-        if (nm_device_get_managed(self, FALSE)) {
-            /* device is managed, both for user-requests and non-user-requests alike. */
-        } else {
-            if (!nm_device_get_managed(self, TRUE)) {
-                /* device is strictly unmanaged by authoritative unmanaged reasons. */
-                nm_utils_error_set_literal(error,
-                                           NM_UTILS_ERROR_CONNECTION_AVAILABLE_UNMANAGED_DEVICE,
-                                           "device is strictly unmanaged");
-                return FALSE;
-            }
-            if (!NM_FLAGS_HAS(flags,
-                              _NM_DEVICE_CHECK_CON_AVAILABLE_FOR_USER_REQUEST_OVERRULE_UNMANAGED)) {
-                /* device could be managed for an explict user-request, but this is not such a request. */
-                nm_utils_error_set_literal(error,
-                                           NM_UTILS_ERROR_CONNECTION_AVAILABLE_UNMANAGED_DEVICE,
-                                           "device is currently unmanaged");
-                return FALSE;
-            }
-        }
-    }
-    if (state < NM_DEVICE_STATE_DISCONNECTED && !nm_device_is_software(self)) {
-        if (!nm_device_is_available(self, _device_check_dev_available_flags_from_con(flags))) {
-            if (NM_FLAGS_HAS(flags, _NM_DEVICE_CHECK_CON_AVAILABLE_FOR_USER_REQUEST)) {
-                nm_utils_error_set_literal(error,
-                                           NM_UTILS_ERROR_CONNECTION_AVAILABLE_TEMPORARY,
-                                           "device is not available");
-            } else {
-                nm_utils_error_set_literal(error,
-                                           NM_UTILS_ERROR_CONNECTION_AVAILABLE_TEMPORARY,
-                                           "device is not available for internal request");
-            }
-            return FALSE;
-        }
-    }
-
-    if (!nm_device_check_connection_compatible(self, connection, error ? &local : NULL)) {
-        if (error) {
-            nm_utils_error_set(error,
-                               local->domain == NM_UTILS_ERROR ? local->code
-                                                               : NM_UTILS_ERROR_UNKNOWN,
-                               "profile is not compatible with device (%s)",
-                               local->message);
-            g_error_free(local);
-        }
-        return FALSE;
-    }
-
-    return NM_DEVICE_GET_CLASS(self)->check_connection_available(self,
-                                                                 connection,
-                                                                 flags,
-                                                                 specific_object,
-                                                                 error);
-}
-
-/**
- * nm_device_check_connection_available():
- * @self: the #NMDevice
- * @connection: the #NMConnection to check for availability
- * @flags: flags to affect the decision making of whether a connection
- *   is available. Adding a flag can only make a connection more available,
- *   not less.
- * @specific_object: a device type dependent argument to further
- *   filter the result. Passing a non %NULL specific object can only reduce
- *   the availability of a connection.
- * @error: optionally give reason why not available.
- *
- * Check if @connection is available to be activated on @self.
- *
- * Returns: %TRUE if @connection can be activated on @self
- */
-gboolean
-nm_device_check_connection_available(NMDevice *                     self,
-                                     NMConnection *                 connection,
-                                     NMDeviceCheckConAvailableFlags flags,
-                                     const char *                   specific_object,
-                                     GError **                      error)
-{
-    gboolean available;
-
-    available =
-        _nm_device_check_connection_available(self, connection, flags, specific_object, error);
-
-#if NM_MORE_ASSERTS >= 2
-    {
-        /* The meaning of the flags is so that *adding* a flag relaxes a condition, thus making
-         * the device *more* available. Assert against that requirement by testing all the flags. */
-        NMDeviceCheckConAvailableFlags i, j, k;
-        gboolean available_all[NM_DEVICE_CHECK_CON_AVAILABLE_ALL + 1] = {FALSE};
-
-        for (i = 0; i <= NM_DEVICE_CHECK_CON_AVAILABLE_ALL; i++)
-            available_all[i] =
-                _nm_device_check_connection_available(self, connection, i, specific_object, NULL);
-
-        for (i = 0; i <= NM_DEVICE_CHECK_CON_AVAILABLE_ALL; i++) {
-            for (j = 1; j <= NM_DEVICE_CHECK_CON_AVAILABLE_ALL; j <<= 1) {
-                if (NM_FLAGS_ANY(i, j)) {
-                    k = i & ~j;
-                    nm_assert(available_all[i] == available_all[k] || available_all[i]);
-                }
-            }
-        }
-    }
-#endif
-
-    return available;
-}
-
-static gboolean
-available_connections_del_all(NMDevice *self)
-{
-    if (g_hash_table_size(self->_priv->available_connections) == 0)
-        return FALSE;
-    g_hash_table_remove_all(self->_priv->available_connections);
-    return TRUE;
-}
-
-static gboolean
-available_connections_add(NMDevice *self, NMSettingsConnection *sett_conn)
-{
-    return g_hash_table_add(self->_priv->available_connections, g_object_ref(sett_conn));
-}
-
-static gboolean
-available_connections_del(NMDevice *self, NMSettingsConnection *sett_conn)
-{
-    return g_hash_table_remove(self->_priv->available_connections, sett_conn);
-}
-
-static gboolean
-check_connection_available(NMDevice *                     self,
-                           NMConnection *                 connection,
-                           NMDeviceCheckConAvailableFlags flags,
-                           const char *                   specific_object,
-                           GError **                      error)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    /* Connections which require a network connection are not available when
-     * the device has no carrier, even with ignore-carrer=TRUE.
-     */
-    if (priv->carrier || !connection_requires_carrier(connection))
-        return TRUE;
-
-    if (NM_FLAGS_HAS(flags, _NM_DEVICE_CHECK_CON_AVAILABLE_FOR_USER_REQUEST_WAITING_CARRIER)
-        && priv->carrier_wait_id != 0) {
-        /* The device has no carrier though the connection requires it.
-         *
-         * If we are still waiting for carrier, the connection is available
-         * for an explicit user-request. */
-        return TRUE;
-    }
-
-    /* master types are always available even without carrier.
-     * Making connection non-available would un-enslave slaves which
-     * is not desired. */
-    if (nm_device_is_master(self))
-        return TRUE;
-
-    nm_utils_error_set_literal(error,
-                               NM_UTILS_ERROR_CONNECTION_AVAILABLE_TEMPORARY,
-                               "device has no carrier");
-    return FALSE;
-}
-
-void
-nm_device_recheck_available_connections(NMDevice *self)
-{
-    NMDevicePrivate *            priv;
-    NMSettingsConnection *const *connections;
-    gboolean                     changed = FALSE;
-    GHashTableIter               h_iter;
-    NMSettingsConnection *       sett_conn;
-    guint                        i;
-    gs_unref_hashtable GHashTable *prune_list = NULL;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (g_hash_table_size(priv->available_connections) > 0) {
-        prune_list = g_hash_table_new(nm_direct_hash, NULL);
-        g_hash_table_iter_init(&h_iter, priv->available_connections);
-        while (g_hash_table_iter_next(&h_iter, (gpointer *) &sett_conn, NULL))
-            g_hash_table_add(prune_list, sett_conn);
-    }
-
-    connections = nm_settings_get_connections(priv->settings, NULL);
-    for (i = 0; connections[i]; i++) {
-        sett_conn = connections[i];
-
-        if (nm_device_check_connection_available(self,
-                                                 nm_settings_connection_get_connection(sett_conn),
-                                                 NM_DEVICE_CHECK_CON_AVAILABLE_NONE,
-                                                 NULL,
-                                                 NULL)) {
-            if (available_connections_add(self, sett_conn))
-                changed = TRUE;
-            if (prune_list)
-                g_hash_table_remove(prune_list, sett_conn);
-        }
-    }
-
-    if (prune_list) {
-        g_hash_table_iter_init(&h_iter, prune_list);
-        while (g_hash_table_iter_next(&h_iter, (gpointer *) &sett_conn, NULL)) {
-            if (available_connections_del(self, sett_conn))
-                changed = TRUE;
-        }
-    }
-
-    if (changed)
-        _notify(self, PROP_AVAILABLE_CONNECTIONS);
-    available_connections_check_delete_unrealized(self);
-}
-
-/**
- * nm_device_get_best_connection:
- * @self: the #NMDevice
- * @specific_object: a specific object path if any
- * @error: reason why no connection was returned
- *
- * Returns a connection that's most suitable for user-initiated activation
- * of a device, optionally with a given specific object.
- *
- * Returns: the #NMSettingsConnection or %NULL (setting an @error)
- */
-NMSettingsConnection *
-nm_device_get_best_connection(NMDevice *self, const char *specific_object, GError **error)
-{
-    NMDevicePrivate *     priv      = NM_DEVICE_GET_PRIVATE(self);
-    NMSettingsConnection *sett_conn = NULL;
-    NMSettingsConnection *candidate;
-    guint64               best_timestamp = 0;
-    GHashTableIter        iter;
-
-    g_hash_table_iter_init(&iter, priv->available_connections);
-    while (g_hash_table_iter_next(&iter, (gpointer) &candidate, NULL)) {
-        guint64 candidate_timestamp = 0;
-
-        /* If a specific object is given, only include connections that are
-         * compatible with it.
-         */
-        if (specific_object /* << Optimization: we know that the connection is available without @specific_object.  */
-            && !nm_device_check_connection_available(
-                self,
-                nm_settings_connection_get_connection(candidate),
-                _NM_DEVICE_CHECK_CON_AVAILABLE_FOR_USER_REQUEST,
-                specific_object,
-                NULL))
-            continue;
-
-        nm_settings_connection_get_timestamp(candidate, &candidate_timestamp);
-        if (!sett_conn || (candidate_timestamp > best_timestamp)) {
-            sett_conn      = candidate;
-            best_timestamp = candidate_timestamp;
-        }
-    }
-
-    if (!sett_conn) {
-        g_set_error(error,
-                    NM_MANAGER_ERROR,
-                    NM_MANAGER_ERROR_UNKNOWN_CONNECTION,
-                    "The device '%s' has no connections available for activation.",
-                    nm_device_get_iface(self));
-    }
-
-    return sett_conn;
-}
-
-static void
-cp_connection_added_or_updated(NMDevice *self, NMSettingsConnection *sett_conn)
-{
-    gboolean changed;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-    g_return_if_fail(NM_IS_SETTINGS_CONNECTION(sett_conn));
-
-    if (nm_device_check_connection_available(self,
-                                             nm_settings_connection_get_connection(sett_conn),
-                                             _NM_DEVICE_CHECK_CON_AVAILABLE_FOR_USER_REQUEST,
-                                             NULL,
-                                             NULL))
-        changed = available_connections_add(self, sett_conn);
-    else
-        changed = available_connections_del(self, sett_conn);
-
-    if (changed) {
-        _notify(self, PROP_AVAILABLE_CONNECTIONS);
-        available_connections_check_delete_unrealized(self);
-    }
-}
-
-static void
-cp_connection_added(NMSettings *settings, NMSettingsConnection *sett_conn, gpointer user_data)
-{
-    cp_connection_added_or_updated(user_data, sett_conn);
-}
-
-static void
-cp_connection_updated(NMSettings *          settings,
-                      NMSettingsConnection *sett_conn,
-                      guint                 update_reason_u,
-                      gpointer              user_data)
-{
-    cp_connection_added_or_updated(user_data, sett_conn);
-}
-
-static void
-cp_connection_removed(NMSettings *settings, NMSettingsConnection *sett_conn, gpointer user_data)
-{
-    NMDevice *self = user_data;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    if (available_connections_del(self, sett_conn)) {
-        _notify(self, PROP_AVAILABLE_CONNECTIONS);
-        available_connections_check_delete_unrealized(self);
-    }
-}
-
-gboolean
-nm_device_supports_vlans(NMDevice *self)
-{
-    return nm_platform_link_supports_vlans(nm_device_get_platform(self),
-                                           nm_device_get_ifindex(self));
-}
-
-/**
- * nm_device_add_pending_action():
- * @self: the #NMDevice to add the pending action to
- * @action: a static string that identifies the action. The string instance must
- *   stay valid until the pending action is removed (that is, the string is
- *   not cloned, but ownership stays with the caller).
- * @assert_not_yet_pending: if %TRUE, assert that the @action is currently not yet pending.
- * Otherwise, ignore duplicate scheduling of the same action silently.
- *
- * Adds a pending action to the device.
- *
- * Returns: %TRUE if the action was added (and not already added before). %FALSE
- * if the same action is already scheduled. In the latter case, the action was not scheduled
- * a second time.
- */
-gboolean
-nm_device_add_pending_action(NMDevice *self, const char *action, gboolean assert_not_yet_pending)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    GSList *         iter;
-    guint            count = 0;
-
-    g_return_val_if_fail(action, FALSE);
-
-    /* Check if the action is already pending. Cannot add duplicate actions */
-    for (iter = priv->pending_actions; iter; iter = iter->next) {
-        if (nm_streq(action, iter->data)) {
-            if (assert_not_yet_pending) {
-                _LOGW(LOGD_DEVICE,
-                      "add_pending_action (%d): '%s' already pending",
-                      count + g_slist_length(iter),
-                      action);
-                g_return_val_if_reached(FALSE);
-            } else {
-                _LOGT(LOGD_DEVICE,
-                      "add_pending_action (%d): '%s' already pending (expected)",
-                      count + g_slist_length(iter),
-                      action);
-            }
-            return FALSE;
-        }
-        count++;
-    }
-
-    priv->pending_actions = g_slist_prepend(priv->pending_actions, (char *) action);
-    count++;
-
-    _LOGD(LOGD_DEVICE, "add_pending_action (%d): '%s'", count, action);
-
-    if (count == 1)
-        _notify(self, PROP_HAS_PENDING_ACTION);
-
-    return TRUE;
-}
-
-/**
- * nm_device_remove_pending_action():
- * @self: the #NMDevice to remove the pending action from
- * @action: a string that identifies the action.
- * @assert_is_pending: if %TRUE, assert that the @action is pending.
- * If %FALSE, don't do anything if the current action is not pending and
- * return %FALSE.
- *
- * Removes a pending action previously added by nm_device_add_pending_action().
- *
- * Returns: whether the @action was pending and is now removed.
- */
-gboolean
-nm_device_remove_pending_action(NMDevice *self, const char *action, gboolean assert_is_pending)
-{
-    NMDevicePrivate *priv;
-    GSList *         iter, *next;
-    guint            count = 0;
-
-    g_return_val_if_fail(self, FALSE);
-    g_return_val_if_fail(action, FALSE);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    for (iter = priv->pending_actions; iter; iter = next) {
-        next = iter->next;
-        if (nm_streq(action, iter->data)) {
-            _LOGD(LOGD_DEVICE,
-                  "remove_pending_action (%d): '%s'",
-                  count + g_slist_length(iter->next), /* length excluding 'iter' */
-                  action);
-            priv->pending_actions = g_slist_delete_link(priv->pending_actions, iter);
-            if (priv->pending_actions == NULL)
-                _notify(self, PROP_HAS_PENDING_ACTION);
-            return TRUE;
-        }
-        count++;
-    }
-
-    if (assert_is_pending) {
-        _LOGW(LOGD_DEVICE, "remove_pending_action (%d): '%s' not pending", count, action);
-        g_return_val_if_reached(FALSE);
-    } else
-        _LOGT(LOGD_DEVICE,
-              "remove_pending_action (%d): '%s' not pending (expected)",
-              count,
-              action);
-
-    return FALSE;
-}
-
-const char *
-nm_device_has_pending_action_reason(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->pending_actions) {
-        if (!priv->pending_actions->next && nm_device_get_state(self) == NM_DEVICE_STATE_ACTIVATED
-            && nm_streq(priv->pending_actions->data, NM_PENDING_ACTION_CARRIER_WAIT)) {
-            /* if the device is already in activated state, and the only reason
-             * why it appears still busy is "carrier-wait", then we are already complete. */
-            return NULL;
-        }
-
-        return priv->pending_actions->data;
-    }
-
-    if (nm_device_is_real(self)
-        && nm_device_get_unmanaged_flags(self, NM_UNMANAGED_PLATFORM_INIT)) {
-        /* as long as the platform link is not yet initialized, we have a pending
-         * action. */
-        return NM_PENDING_ACTION_LINK_INIT;
-    }
-
-    return NULL;
-}
-
-/*****************************************************************************/
-
-static void
-_cancel_activation(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->fw_call) {
-        nm_firewall_manager_cancel_call(priv->fw_call);
-        nm_assert(!priv->fw_call);
-        priv->fw_call  = NULL;
-        priv->fw_state = FIREWALL_STATE_INITIALIZED;
-    }
-
-    ip_check_gw_ping_cleanup(self);
-
-    /* Break the activation chain */
-    activation_source_clear(self, AF_INET);
-    activation_source_clear(self, AF_INET6);
-}
-
-static void
-_cleanup_generic_pre(NMDevice *self, CleanupType cleanup_type)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    _cancel_activation(self);
-
-    priv->stage1_sriov_state = NM_DEVICE_STAGE_STATE_INIT;
-
-    if (cleanup_type != CLEANUP_TYPE_KEEP) {
-        nm_manager_device_route_metric_clear(NM_MANAGER_GET, nm_device_get_ip_ifindex(self));
-    }
-
-    if (cleanup_type == CLEANUP_TYPE_DECONFIGURE && priv->fw_state >= FIREWALL_STATE_INITIALIZED
-        && priv->fw_mgr && !nm_device_sys_iface_state_is_external(self)) {
-        nm_firewall_manager_remove_from_zone(priv->fw_mgr,
-                                             nm_device_get_ip_iface(self),
-                                             NULL,
-                                             NULL,
-                                             NULL);
-    }
-    priv->fw_state = FIREWALL_STATE_UNMANAGED;
-    g_clear_object(&priv->fw_mgr);
-
-    queued_state_clear(self);
-
-    nm_clear_pointer(&priv->shared_ip_handle, nm_netns_shared_ip_release);
-
-    _cleanup_ip_pre(self, AF_INET, cleanup_type);
-    _cleanup_ip_pre(self, AF_INET6, cleanup_type);
-}
-
-static void
-_cleanup_generic_post(NMDevice *self, CleanupType cleanup_type)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    priv->v4_commit_first_time = TRUE;
-    priv->v6_commit_first_time = TRUE;
-
-    priv->v4_route_table_initialized = FALSE;
-    priv->v6_route_table_initialized = FALSE;
-
-    priv->v4_route_table_all_sync_before = FALSE;
-    priv->v6_route_table_all_sync_before = FALSE;
-
-    priv->default_route_metric_penalty_ip4_has = FALSE;
-    priv->default_route_metric_penalty_ip6_has = FALSE;
-
-    priv->linklocal6_dad_counter = 0;
-
-    priv->mtu_force_set_done = FALSE;
-
-    /* Clean up IP configs; this does not actually deconfigure the
-     * interface; the caller must flush routes and addresses explicitly.
-     */
-    nm_device_set_ip_config(self, AF_INET, NULL, TRUE, NULL);
-    nm_device_set_ip_config(self, AF_INET6, NULL, TRUE, NULL);
-    g_clear_object(&priv->proxy_config);
-    g_clear_object(&priv->con_ip_config_4);
-    applied_config_clear(&priv->dev_ip_config_4);
-    applied_config_clear(&priv->dev2_ip_config_4);
-    g_clear_object(&priv->ext_ip_config_4);
-    g_clear_object(&priv->ip_config_4);
-    g_clear_object(&priv->con_ip_config_6);
-    applied_config_clear(&priv->ac_ip6_config);
-    g_clear_object(&priv->ext_ip_config_6);
-    g_clear_object(&priv->ext_ip6_config_captured);
-    applied_config_clear(&priv->dev2_ip_config_6);
-    g_clear_object(&priv->ip_config_6);
-    g_clear_object(&priv->dad6_ip6_config);
-    priv->ipv6ll_has = FALSE;
-    memset(&priv->ipv6ll_addr, 0, sizeof(priv->ipv6ll_addr));
-
-    nm_clear_pointer(&priv->rt6_temporary_not_available, g_hash_table_unref);
-    nm_clear_g_source(&priv->rt6_temporary_not_available_id);
-
-    g_slist_free_full(priv->vpn_configs_4, g_object_unref);
-    priv->vpn_configs_4 = NULL;
-    g_slist_free_full(priv->vpn_configs_6, g_object_unref);
-    priv->vpn_configs_6 = NULL;
-
-    /* We no longer accept the delegations. nm_device_set_ip_config(NULL)
-     * above disables them. */
-    nm_assert(priv->needs_ip6_subnet == FALSE);
-
-    if (priv->act_request.obj) {
-        nm_active_connection_set_default(NM_ACTIVE_CONNECTION(priv->act_request.obj),
-                                         AF_INET,
-                                         FALSE);
-        nm_clear_g_signal_handler(priv->act_request.obj, &priv->master_ready_id);
-        act_request_set(self, NULL);
-    }
-
-    if (cleanup_type == CLEANUP_TYPE_DECONFIGURE) {
-        /* Check if the device was deactivated, and if so, delete_link.
-         * Don't call delete_link synchronously because we are currently
-         * handling a state change -- which is not reentrant. */
-        delete_on_deactivate_check_and_schedule(self, nm_device_get_ip_ifindex(self));
-    }
-
-    /* ip_iface should be cleared after flushing all routes and addresses, since
-     * those are identified by ip_iface, not by iface (which might be a tty
-     * or ATM device).
-     */
-    _set_ip_ifindex(self, 0, NULL);
-}
-
-/*
- * nm_device_cleanup
- *
- * Remove a device's routing table entries and IP addresses.
- *
- */
-static void
-nm_device_cleanup(NMDevice *self, NMDeviceStateReason reason, CleanupType cleanup_type)
-{
-    NMDevicePrivate *priv;
-    int              ifindex;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    if (reason == NM_DEVICE_STATE_REASON_NOW_MANAGED)
-        _LOGD(LOGD_DEVICE, "preparing device");
-    else
-        _LOGD(LOGD_DEVICE,
-              "deactivating device (reason '%s') [%d]",
-              reason_to_string_a(reason),
-              reason);
-
-    /* Save whether or not we tried IPv6 for later */
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    _cleanup_generic_pre(self, cleanup_type);
-
-    /* Turn off kernel IPv6 */
-    if (cleanup_type == CLEANUP_TYPE_DECONFIGURE) {
-        set_disable_ipv6(self, "1");
-        nm_device_sysctl_ip_conf_set(self, AF_INET6, "use_tempaddr", "0");
-    }
-
-    /* Call device type-specific deactivation */
-    if (NM_DEVICE_GET_CLASS(self)->deactivate)
-        NM_DEVICE_GET_CLASS(self)->deactivate(self);
-
-    ifindex = nm_device_get_ip_ifindex(self);
-
-    if (cleanup_type == CLEANUP_TYPE_DECONFIGURE) {
-        /* master: release slaves */
-        nm_device_master_release_slaves(self);
-
-        /* Take out any entries in the routing table and any IP address the device had. */
-        if (ifindex > 0) {
-            NMPlatform *       platform = nm_device_get_platform(self);
-            NMUtilsIPv6IfaceId iid      = {};
-
-            nm_platform_ip_route_flush(platform, AF_UNSPEC, ifindex);
-            nm_platform_ip_address_flush(platform, AF_UNSPEC, ifindex);
-            nm_platform_tfilter_sync(platform, ifindex, NULL);
-            nm_platform_qdisc_sync(platform, ifindex, NULL);
-            set_ipv6_token(self, iid, "::");
-        }
-    }
-
-    _routing_rules_sync(self,
-                        cleanup_type == CLEANUP_TYPE_KEEP ? NM_TERNARY_DEFAULT : NM_TERNARY_FALSE);
-
-    if (ifindex > 0)
-        nm_platform_ip4_dev_route_blacklist_set(nm_device_get_platform(self), ifindex, NULL);
-
-    /* slave: mark no longer enslaved */
-    if (priv->master && priv->ifindex > 0
-        && nm_platform_link_get_master(nm_device_get_platform(self), priv->ifindex) <= 0)
-        nm_device_master_release_one_slave(priv->master,
-                                           self,
-                                           FALSE,
-                                           FALSE,
-                                           NM_DEVICE_STATE_REASON_CONNECTION_ASSUMED);
-
-    if (priv->lldp_listener)
-        nm_lldp_listener_stop(priv->lldp_listener);
-
-    nm_device_update_metered(self);
-
-    if (ifindex > 0) {
-        /* during device cleanup, we want to reset the MAC address of the device
-         * to the initial state.
-         *
-         * We certainly want to do that when reaching the UNMANAGED state... */
-        if (nm_device_get_state(self) <= NM_DEVICE_STATE_UNMANAGED)
-            nm_device_hw_addr_reset(self, "unmanage");
-        else {
-            /* for other device states (UNAVAILABLE, DISCONNECTED), allow the
-             * device to overwrite the reset behavior, so that Wi-Fi can set
-             * a randomized MAC address used during scanning. */
-            NM_DEVICE_GET_CLASS(self)->deactivate_reset_hw_addr(self);
-        }
-    }
-
-    priv->mtu_source = NM_DEVICE_MTU_SOURCE_NONE;
-    priv->ip6_mtu    = 0;
-    if (priv->mtu_initial || priv->ip6_mtu_initial) {
-        ifindex = nm_device_get_ip_ifindex(self);
-
-        if (ifindex > 0 && cleanup_type == CLEANUP_TYPE_DECONFIGURE) {
-            _LOGT(LOGD_DEVICE,
-                  "mtu: reset device-mtu: %u, ipv6-mtu: %u, ifindex: %d",
-                  (guint) priv->mtu_initial,
-                  (guint) priv->ip6_mtu_initial,
-                  ifindex);
-            if (priv->mtu_initial) {
-                nm_platform_link_set_mtu(nm_device_get_platform(self), ifindex, priv->mtu_initial);
-                priv->carrier_wait_until_ms =
-                    nm_utils_get_monotonic_timestamp_msec() + CARRIER_WAIT_TIME_AFTER_MTU_MS;
-            }
-            if (priv->ip6_mtu_initial) {
-                char sbuf[64];
-
-                nm_device_sysctl_ip_conf_set(
-                    self,
-                    AF_INET6,
-                    "mtu",
-                    nm_sprintf_buf(sbuf, "%u", (unsigned) priv->ip6_mtu_initial));
-            }
-        }
-        priv->mtu_initial     = 0;
-        priv->ip6_mtu_initial = 0;
-    }
-
-    _ethtool_state_reset(self);
-
-    _cleanup_generic_post(self, cleanup_type);
-}
-
-static void
-deactivate_reset_hw_addr(NMDevice *self)
-{
-    nm_device_hw_addr_reset(self, "deactivate");
-}
-
-static char *
-find_dhcp4_address(NMDevice *self)
-{
-    NMDevicePrivate *           priv = NM_DEVICE_GET_PRIVATE(self);
-    const NMPlatformIP4Address *a;
-    NMDedupMultiIter            ipconf_iter;
-
-    if (!priv->ip_config_4)
-        return NULL;
-
-    nm_ip_config_iter_ip4_address_for_each (&ipconf_iter, priv->ip_config_4, &a) {
-        if (a->addr_source == NM_IP_CONFIG_SOURCE_DHCP)
-            return nm_utils_inet4_ntop_dup(a->address);
-    }
-    return NULL;
-}
-
-void
-nm_device_spawn_iface_helper(NMDevice *self)
-{
-    NMDevicePrivate * priv       = NM_DEVICE_GET_PRIVATE(self);
-    gboolean          configured = FALSE;
-    NMConnection *    connection;
-    GError *          error = NULL;
-    const char *      method;
-    GPtrArray *       argv;
-    gs_free char *    dhcp4_address = NULL;
-    char *            logging_backend;
-    NMUtilsStableType stable_type;
-    const char *      stable_id;
-
-    if (priv->state != NM_DEVICE_STATE_ACTIVATED)
-        return;
-    if (!nm_device_can_assume_connections(self))
-        return;
-
-    connection = nm_device_get_applied_connection(self);
-
-    g_return_if_fail(connection);
-
-    argv = g_ptr_array_sized_new(10);
-    g_ptr_array_set_free_func(argv, g_free);
-
-    g_ptr_array_add(argv, g_strdup(LIBEXECDIR "/nm-iface-helper"));
-    g_ptr_array_add(argv, g_strdup("--ifname"));
-    g_ptr_array_add(argv, g_strdup(nm_device_get_ip_iface(self)));
-    g_ptr_array_add(argv, g_strdup("--uuid"));
-    g_ptr_array_add(argv, g_strdup(nm_connection_get_uuid(connection)));
-
-    stable_id = _prop_get_connection_stable_id(self, connection, &stable_type);
-    if (stable_type != NM_UTILS_STABLE_TYPE_UUID) {
-        g_ptr_array_add(argv, g_strdup("--stable-id"));
-        g_ptr_array_add(argv, g_strdup_printf("%d %s", (int) stable_type, stable_id));
-    }
-
-    logging_backend =
-        nm_config_data_get_value(NM_CONFIG_GET_DATA_ORIG,
-                                 NM_CONFIG_KEYFILE_GROUP_LOGGING,
-                                 NM_CONFIG_KEYFILE_KEY_LOGGING_BACKEND,
-                                 NM_CONFIG_GET_VALUE_STRIP | NM_CONFIG_GET_VALUE_NO_EMPTY);
-    if (logging_backend) {
-        g_ptr_array_add(argv, g_strdup("--logging-backend"));
-        g_ptr_array_add(argv, logging_backend);
-    }
-
-    g_ptr_array_add(argv, g_strdup("--log-level"));
-    g_ptr_array_add(argv, g_strdup(nm_logging_level_to_string()));
-
-    g_ptr_array_add(argv, g_strdup("--log-domains"));
-    g_ptr_array_add(argv, g_strdup(nm_logging_domains_to_string()));
-
-    dhcp4_address = find_dhcp4_address(self);
-
-    method = nm_device_get_effective_ip_config_method(self, AF_INET);
-    if (nm_streq(method, NM_SETTING_IP4_CONFIG_METHOD_AUTO)) {
-        NMSettingIPConfig *s_ip4;
-
-        s_ip4 = nm_connection_get_setting_ip4_config(connection);
-        nm_assert(s_ip4);
-
-        g_ptr_array_add(argv, g_strdup("--priority4"));
-        g_ptr_array_add(argv, g_strdup_printf("%u", nm_device_get_route_metric(self, AF_INET)));
-
-        g_ptr_array_add(argv, g_strdup("--dhcp4"));
-        g_ptr_array_add(argv, g_strdup(dhcp4_address));
-        if (nm_setting_ip_config_get_may_fail(s_ip4) == FALSE)
-            g_ptr_array_add(argv, g_strdup("--dhcp4-required"));
-
-        if (priv->dhcp_data_4.client) {
-            const char *hostname;
-            GBytes *    client_id;
-
-            client_id = nm_dhcp_client_get_client_id(priv->dhcp_data_4.client);
-            if (client_id) {
-                g_ptr_array_add(argv, g_strdup("--dhcp4-clientid"));
-                g_ptr_array_add(argv,
-                                nm_utils_bin2hexstr_full(g_bytes_get_data(client_id, NULL),
-                                                         g_bytes_get_size(client_id),
-                                                         ':',
-                                                         FALSE,
-                                                         NULL));
-            }
-
-            hostname = nm_dhcp_client_get_hostname(priv->dhcp_data_4.client);
-            if (hostname) {
-                if (nm_dhcp_client_get_use_fqdn(priv->dhcp_data_4.client))
-                    g_ptr_array_add(argv, g_strdup("--dhcp4-fqdn"));
-                else
-                    g_ptr_array_add(argv, g_strdup("--dhcp4-hostname"));
-                g_ptr_array_add(argv, g_strdup(hostname));
-            }
-        }
-
-        configured = TRUE;
-    }
-
-    method = nm_utils_get_ip_config_method(connection, AF_INET6);
-    if (nm_streq(method, NM_SETTING_IP6_CONFIG_METHOD_AUTO)) {
-        NMSettingIPConfig *s_ip6;
-        NMUtilsIPv6IfaceId iid = NM_UTILS_IPV6_IFACE_ID_INIT;
-
-        s_ip6 = nm_connection_get_setting_ip6_config(connection);
-        g_assert(s_ip6);
-
-        g_ptr_array_add(argv, g_strdup("--priority6"));
-        g_ptr_array_add(argv, g_strdup_printf("%u", nm_device_get_route_metric(self, AF_INET6)));
-
-        g_ptr_array_add(argv, g_strdup("--slaac"));
-
-        if (nm_setting_ip_config_get_may_fail(s_ip6) == FALSE)
-            g_ptr_array_add(argv, g_strdup("--slaac-required"));
-
-        g_ptr_array_add(argv, g_strdup("--slaac-tempaddr"));
-        g_ptr_array_add(argv, g_strdup_printf("%d", priv->ndisc_use_tempaddr));
-
-        if (nm_device_get_ip_iface_identifier(self, &iid, FALSE)) {
-            g_ptr_array_add(argv, g_strdup("--iid"));
-            g_ptr_array_add(
-                argv,
-                nm_utils_bin2hexstr_full(iid.id_u8, sizeof(NMUtilsIPv6IfaceId), ':', FALSE, NULL));
-        }
-
-        g_ptr_array_add(argv, g_strdup("--addr-gen-mode"));
-        g_ptr_array_add(
-            argv,
-            g_strdup_printf("%d",
-                            nm_setting_ip6_config_get_addr_gen_mode(NM_SETTING_IP6_CONFIG(s_ip6))));
-
-        configured = TRUE;
-    }
-
-    if (configured) {
-        GPid pid;
-
-        g_ptr_array_add(argv, NULL);
-
-        if (nm_logging_enabled(LOGL_DEBUG, LOGD_DEVICE)) {
-            char *tmp;
-
-            tmp = g_strjoinv(" ", (char **) argv->pdata);
-            _LOGD(LOGD_DEVICE, "running '%s'", tmp);
-            g_free(tmp);
-        }
-
-        if (g_spawn_async(NULL,
-                          (char **) argv->pdata,
-                          NULL,
-                          G_SPAWN_DO_NOT_REAP_CHILD,
-                          NULL,
-                          NULL,
-                          &pid,
-                          &error)) {
-            _LOGI(LOGD_DEVICE, "spawned helper PID %u", (guint) pid);
-        } else {
-            _LOGW(LOGD_DEVICE, "failed to spawn helper: %s", error->message);
-            g_error_free(error);
-        }
-    }
-
-    g_ptr_array_unref(argv);
-}
-
-/*****************************************************************************/
-
-static gboolean
-ip_config_valid(NMDeviceState state)
-{
-    return (state == NM_DEVICE_STATE_UNMANAGED)
-           || (state >= NM_DEVICE_STATE_IP_CHECK && state <= NM_DEVICE_STATE_DEACTIVATING);
-}
-
-static void
-notify_ip_properties(NMDevice *self)
-{
-    _notify(self, PROP_IP_IFACE);
-    _notify(self, PROP_IP4_CONFIG);
-    _notify(self, PROP_DHCP4_CONFIG);
-    _notify(self, PROP_IP6_CONFIG);
-    _notify(self, PROP_DHCP6_CONFIG);
-}
-
-static void
-ip6_managed_setup(NMDevice *self)
-{
-    set_nm_ipv6ll(self, TRUE);
-    set_disable_ipv6(self, "1");
-    nm_device_sysctl_ip_conf_set(self, AF_INET6, "accept_ra", "0");
-    nm_device_sysctl_ip_conf_set(self, AF_INET6, "use_tempaddr", "0");
-    nm_device_sysctl_ip_conf_set(self, AF_INET6, "forwarding", "0");
-}
-
-static void
-deactivate_ready(NMDevice *self, NMDeviceStateReason reason)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->dispatcher.call_id)
-        return;
-
-    if (priv->sriov_reset_pending > 0)
-        return;
-
-    if (priv->state == NM_DEVICE_STATE_DEACTIVATING)
-        nm_device_queue_state(self, NM_DEVICE_STATE_DISCONNECTED, reason);
-}
-
-static void
-sriov_reset_on_deactivate_cb(GError *error, gpointer user_data)
-{
-    NMDevice *       self;
-    NMDevicePrivate *priv;
-    gpointer         reason;
-
-    nm_utils_user_data_unpack(user_data, &self, &reason);
-    priv = NM_DEVICE_GET_PRIVATE(self);
-    nm_assert(priv->sriov_reset_pending > 0);
-    priv->sriov_reset_pending--;
-
-    if (nm_utils_error_is_cancelled(error))
-        return;
-
-    deactivate_ready(self, GPOINTER_TO_INT(reason));
-}
-
-static void
-sriov_reset_on_failure_cb(GError *error, gpointer user_data)
-{
-    NMDevice *       self = user_data;
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    nm_assert(priv->sriov_reset_pending > 0);
-    priv->sriov_reset_pending--;
-
-    if (nm_utils_error_is_cancelled(error))
-        return;
-
-    if (priv->state == NM_DEVICE_STATE_FAILED) {
-        nm_device_queue_state(self, NM_DEVICE_STATE_DISCONNECTED, NM_DEVICE_STATE_REASON_NONE);
-    }
-}
-
-static void
-deactivate_async_ready(NMDevice *self, GError *error, gpointer user_data)
-{
-    NMDevicePrivate *   priv   = NM_DEVICE_GET_PRIVATE(self);
-    NMDeviceStateReason reason = GPOINTER_TO_UINT(user_data);
-
-    if (g_error_matches(error, G_IO_ERROR, G_IO_ERROR_CANCELLED)) {
-        _LOGD(LOGD_DEVICE, "Deactivation cancelled");
-        return;
-    }
-
-    g_clear_object(&priv->deactivating_cancellable);
-
-    /* In every other case, transition to the DISCONNECTED state */
-    if (error) {
-        _LOGW(LOGD_DEVICE, "Deactivation failed: %s", error->message);
-    }
-
-    deactivate_ready(self, reason);
-}
-
-static void
-deactivate_dispatcher_complete(NMDispatcherCallId *call_id, gpointer user_data)
-{
-    NMDevice *          self = NM_DEVICE(user_data);
-    NMDevicePrivate *   priv = NM_DEVICE_GET_PRIVATE(self);
-    NMDeviceStateReason reason;
-
-    g_return_if_fail(call_id == priv->dispatcher.call_id);
-    g_return_if_fail(priv->dispatcher.post_state == NM_DEVICE_STATE_DISCONNECTED);
-
-    reason = priv->state_reason;
-
-    priv->dispatcher.call_id           = NULL;
-    priv->dispatcher.post_state        = NM_DEVICE_STATE_UNKNOWN;
-    priv->dispatcher.post_state_reason = NM_DEVICE_STATE_REASON_NONE;
-
-    if (nm_clear_g_cancellable(&priv->deactivating_cancellable))
-        nm_assert_not_reached();
-
-    if (NM_DEVICE_GET_CLASS(self)->deactivate_async) {
-        /* FIXME: the virtual function deactivate_async() has only this caller here.
-         * And the NMDevice subtypes are well aware of the circumstances when they
-         * are called. We shall make the function less generic and thus (as the scope
-         * is narrower) more convenient.
-         *
-         * - Drop the callback argument. Instead, when deactivate_async() completes, the
-         *   subtype shall call a method _nm_device_deactivate_async_done(). Because as
-         *   it is currently, subtypes need to pretend this callback and the user-data
-         *   would be opaque, and carry it around. When it's in fact very clear what this
-         *   is.
-         *
-         * - Also drop the GCancellable argument. Upon cancellation, NMDevice shall
-         *   call another virtual function deactivate_async_abort(). As it is currently,
-         *   callers need to register to the cancelled signal of the cancellable. It
-         *   seems simpler to just implement the deactivate_async_abort() function.
-         *   On the other hand, some implementations actually use the GCancellable.
-         *   So, NMDevice shall do both: it shall both pass a cancellable, but also
-         *   invoke deactivate_async_abort(). It allow the implementation to honor
-         *   whatever is simpler for their purpose.
-         *
-         * - sometimes, the subclass can complete right away. Scheduling the completion
-         *   in an idle handler is cumbersome. Allow the function to return FALSE to
-         *   indicate that the device is already deactivated and the callback (or
-         *   _nm_device_deactivate_async_done()) won't be invoked.
-         */
-        priv->deactivating_cancellable = g_cancellable_new();
-        NM_DEVICE_GET_CLASS(self)->deactivate_async(self,
-                                                    priv->deactivating_cancellable,
-                                                    deactivate_async_ready,
-                                                    GUINT_TO_POINTER(reason));
-    } else
-        deactivate_ready(self, reason);
-}
-
-static void
-_set_state_full(NMDevice *self, NMDeviceState state, NMDeviceStateReason reason, gboolean quitting)
-{
-    NMDevicePrivate *priv;
-    NMDeviceState    old_state;
-    gs_unref_object NMActRequest *req         = NULL;
-    gboolean                      no_firmware = FALSE;
-    NMSettingsConnection *        sett_conn;
-    NMSettingSriov *              s_sriov;
-    gboolean                      concheck_now;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    /* Track re-entry */
-    g_warn_if_fail(priv->in_state_changed == FALSE);
-
-    old_state = priv->state;
-
-    if (state == NM_DEVICE_STATE_FAILED && nm_device_sys_iface_state_is_external_or_assume(self)) {
-        /* Avoid tearing down assumed connection, assume it's connected */
-        state  = NM_DEVICE_STATE_ACTIVATED;
-        reason = NM_DEVICE_STATE_REASON_CONNECTION_ASSUMED;
-    }
-
-    /* Do nothing if state isn't changing, but as a special case allow
-     * re-setting UNAVAILABLE if the device is missing firmware so that we
-     * can retry device initialization.
-     */
-    if ((priv->state == state)
-        && (state != NM_DEVICE_STATE_UNAVAILABLE || !priv->firmware_missing)) {
-        _LOGD(LOGD_DEVICE,
-              "state change: %s -> %s (reason '%s', sys-iface-state: '%s'%s)",
-              nm_device_state_to_str(old_state),
-              nm_device_state_to_str(state),
-              reason_to_string_a(reason),
-              _sys_iface_state_to_str(priv->sys_iface_state),
-              priv->firmware_missing ? ", missing firmware" : "");
-        return;
-    }
-
-    _LOGI(LOGD_DEVICE,
-          "state change: %s -> %s (reason '%s', sys-iface-state: '%s')",
-          nm_device_state_to_str(old_state),
-          nm_device_state_to_str(state),
-          reason_to_string_a(reason),
-          _sys_iface_state_to_str(priv->sys_iface_state));
-
-    /* in order to prevent triggering any callback caused
-     * by the device not having any pending action anymore
-     * we add one here that gets removed at the end of the function */
-    nm_device_add_pending_action(self, NM_PENDING_ACTION_IN_STATE_CHANGE, TRUE);
-    priv->in_state_changed = TRUE;
-
-    priv->state        = state;
-    priv->state_reason = reason;
-
-    queued_state_clear(self);
-
-    dispatcher_cleanup(self);
-
-    nm_clear_g_cancellable(&priv->deactivating_cancellable);
-
-    /* Cache the activation request for the dispatcher */
-    req = nm_g_object_ref(priv->act_request.obj);
-
-    if (state > NM_DEVICE_STATE_UNMANAGED && state <= NM_DEVICE_STATE_ACTIVATED
-        && nm_device_state_reason_check(reason) == NM_DEVICE_STATE_REASON_NOW_MANAGED
-        && NM_IN_SET_TYPED(NMDeviceSysIfaceState,
-                           priv->sys_iface_state,
-                           NM_DEVICE_SYS_IFACE_STATE_EXTERNAL,
-                           NM_DEVICE_SYS_IFACE_STATE_ASSUME))
-        nm_device_sys_iface_state_set(self, NM_DEVICE_SYS_IFACE_STATE_MANAGED);
-
-    if (state <= NM_DEVICE_STATE_DISCONNECTED || state >= NM_DEVICE_STATE_ACTIVATED)
-        priv->auth_retries = NM_DEVICE_AUTH_RETRIES_UNSET;
-
-    if (state > NM_DEVICE_STATE_DISCONNECTED)
-        nm_device_assume_state_reset(self);
-
-    if (state <= NM_DEVICE_STATE_UNAVAILABLE) {
-        if (available_connections_del_all(self))
-            _notify(self, PROP_AVAILABLE_CONNECTIONS);
-        if (old_state > NM_DEVICE_STATE_UNAVAILABLE) {
-            _clear_queued_act_request(priv, NM_ACTIVE_CONNECTION_STATE_REASON_DEVICE_DISCONNECTED);
-        }
-    }
-
-    /* Update the available connections list when a device first becomes available */
-    if (state >= NM_DEVICE_STATE_DISCONNECTED && old_state < NM_DEVICE_STATE_DISCONNECTED)
-        nm_device_recheck_available_connections(self);
-
-    if (state <= NM_DEVICE_STATE_DISCONNECTED || state > NM_DEVICE_STATE_DEACTIVATING) {
-        if (nm_clear_g_free(&priv->current_stable_id))
-            _LOGT(LOGD_DEVICE, "stable-id: clear");
-    }
-
-    /* Handle the new state here; but anything that could trigger
-     * another state change should be done below.
-     */
-    switch (state) {
-    case NM_DEVICE_STATE_UNMANAGED:
-        nm_device_set_firmware_missing(self, FALSE);
-        if (old_state > NM_DEVICE_STATE_UNMANAGED) {
-            if (priv->sys_iface_state != NM_DEVICE_SYS_IFACE_STATE_MANAGED) {
-                nm_device_cleanup(self,
-                                  reason,
-                                  priv->sys_iface_state == NM_DEVICE_SYS_IFACE_STATE_REMOVED
-                                      ? CLEANUP_TYPE_REMOVED
-                                      : CLEANUP_TYPE_KEEP);
-            } else {
-                /* Clean up if the device is now unmanaged but was activated */
-                if (nm_device_get_act_request(self))
-                    nm_device_cleanup(self, reason, CLEANUP_TYPE_DECONFIGURE);
-                nm_device_take_down(self, TRUE);
-                nm_device_hw_addr_reset(self, "unmanage");
-                set_nm_ipv6ll(self, FALSE);
-                restore_ip6_properties(self);
-                break;
-            }
-        }
-        break;
-    case NM_DEVICE_STATE_UNAVAILABLE:
-        if (old_state == NM_DEVICE_STATE_UNMANAGED) {
-            save_ip6_properties(self);
-            if (priv->sys_iface_state == NM_DEVICE_SYS_IFACE_STATE_MANAGED)
-                ip6_managed_setup(self);
-            device_init_static_sriov_num_vfs(self);
-        }
-
-        if (priv->sys_iface_state == NM_DEVICE_SYS_IFACE_STATE_MANAGED) {
-            if (old_state == NM_DEVICE_STATE_UNMANAGED || priv->firmware_missing) {
-                if (!nm_device_bring_up(self, TRUE, &no_firmware) && no_firmware)
-                    _LOGW(LOGD_PLATFORM, "firmware may be missing.");
-                nm_device_set_firmware_missing(self, no_firmware ? TRUE : FALSE);
-            }
-
-            /* Ensure the device gets deactivated in response to stuff like
-             * carrier changes or rfkill.  But don't deactivate devices that are
-             * about to assume a connection since that defeats the purpose of
-             * assuming the device's existing connection.
-             *
-             * Note that we "deactivate" the device even when coming from
-             * UNMANAGED, to ensure that it's in a clean state.
-             */
-            nm_device_cleanup(self, reason, CLEANUP_TYPE_DECONFIGURE);
-        }
-        break;
-    case NM_DEVICE_STATE_DISCONNECTED:
-        if (old_state > NM_DEVICE_STATE_DISCONNECTED) {
-            /* Ensure devices that previously assumed a connection now have
-             * userspace IPv6LL enabled.
-             */
-            set_nm_ipv6ll(self, TRUE);
-
-            nm_device_cleanup(self, reason, CLEANUP_TYPE_DECONFIGURE);
-        } else if (old_state < NM_DEVICE_STATE_DISCONNECTED) {
-            if (priv->sys_iface_state == NM_DEVICE_SYS_IFACE_STATE_MANAGED) {
-                /* Ensure IPv6 is set up as it may not have been done when
-                 * entering the UNAVAILABLE state depending on the reason.
-                 */
-                ip6_managed_setup(self);
-            }
-        }
-        break;
-    case NM_DEVICE_STATE_PREPARE:
-        nm_device_update_initial_hw_address(self);
-        break;
-    case NM_DEVICE_STATE_NEED_AUTH:
-        if (old_state > NM_DEVICE_STATE_NEED_AUTH) {
-            /* Clean up any half-done IP operations if the device's layer2
-             * finds out it needs authentication during IP config.
-             */
-            _cleanup_ip_pre(self, AF_INET, CLEANUP_TYPE_DECONFIGURE);
-            _cleanup_ip_pre(self, AF_INET6, CLEANUP_TYPE_DECONFIGURE);
-        }
-        break;
-    default:
-        break;
-    }
-
-    /* Reset intern autoconnect flags when the device is activating or connected. */
-    if (state >= NM_DEVICE_STATE_PREPARE && state <= NM_DEVICE_STATE_ACTIVATED)
-        nm_device_autoconnect_blocked_unset(self, NM_DEVICE_AUTOCONNECT_BLOCKED_INTERNAL);
-
-    _notify(self, PROP_STATE);
-    _notify(self, PROP_STATE_REASON);
-    nm_dbus_object_emit_signal(NM_DBUS_OBJECT(self),
-                               &interface_info_device,
-                               &signal_info_state_changed,
-                               "(uuu)",
-                               (guint32) state,
-                               (guint32) old_state,
-                               (guint32) reason);
-    g_signal_emit(self,
-                  signals[STATE_CHANGED],
-                  0,
-                  (guint) state,
-                  (guint) old_state,
-                  (guint) reason);
-
-    /* Post-process the event after internal notification */
-
-    switch (state) {
-    case NM_DEVICE_STATE_UNAVAILABLE:
-        /* If the device can activate now (ie, it's got a carrier, the supplicant
-         * is active, or whatever) schedule a delayed transition to DISCONNECTED
-         * to get things rolling.  The device can't transition immediately because
-         * we can't change states again from the state handler for a variety of
-         * reasons.
-         */
-        if (nm_device_is_available(self, NM_DEVICE_CHECK_DEV_AVAILABLE_NONE)) {
-            nm_device_queue_recheck_available(self,
-                                              NM_DEVICE_STATE_REASON_NONE,
-                                              NM_DEVICE_STATE_REASON_NONE);
-        } else {
-            _LOGD(LOGD_DEVICE, "device not yet available for transition to DISCONNECTED");
-        }
-        break;
-    case NM_DEVICE_STATE_DEACTIVATING:
-        _cancel_activation(self);
-
-        /* We cache the ignore_carrier state to not react on config-reloads while the connection
-         * is active. But on deactivating, reset the ignore-carrier flag to the current state. */
-        priv->ignore_carrier = nm_config_data_get_ignore_carrier(NM_CONFIG_GET_DATA, self);
-
-        if (quitting) {
-            nm_dispatcher_call_device_sync(NM_DISPATCHER_ACTION_PRE_DOWN, self, req);
-        } else {
-            priv->dispatcher.post_state        = NM_DEVICE_STATE_DISCONNECTED;
-            priv->dispatcher.post_state_reason = reason;
-            if (!nm_dispatcher_call_device(NM_DISPATCHER_ACTION_PRE_DOWN,
-                                           self,
-                                           req,
-                                           deactivate_dispatcher_complete,
-                                           self,
-                                           &priv->dispatcher.call_id)) {
-                /* Just proceed on errors */
-                deactivate_dispatcher_complete(0, self);
-            }
-
-            if (priv->ifindex > 0
-                && (s_sriov = nm_device_get_applied_setting(self, NM_TYPE_SETTING_SRIOV))) {
-                priv->sriov_reset_pending++;
-                sriov_op_queue(self,
-                               0,
-                               NM_TERNARY_TRUE,
-                               sriov_reset_on_deactivate_cb,
-                               nm_utils_user_data_pack(self, GINT_TO_POINTER(reason)));
-            }
-        }
-
-        nm_pacrunner_manager_remove_clear(&priv->pacrunner_conf_id);
-        break;
-    case NM_DEVICE_STATE_DISCONNECTED:
-        if (priv->queued_act_request && !priv->queued_act_request_is_waiting_for_carrier) {
-            gs_unref_object NMActRequest *queued_req = NULL;
-
-            queued_req = g_steal_pointer(&priv->queued_act_request);
-            _device_activate(self, queued_req);
-        }
-        break;
-    case NM_DEVICE_STATE_ACTIVATED:
-        _LOGI(LOGD_DEVICE, "Activation: successful, device activated.");
-        nm_device_update_metered(self);
-        nm_dispatcher_call_device(NM_DISPATCHER_ACTION_UP, self, req, NULL, NULL, NULL);
-
-        if (priv->proxy_config)
-            _pacrunner_manager_add(self);
-        break;
-    case NM_DEVICE_STATE_FAILED:
-        /* Usually upon failure the activation chain is interrupted in
-         * one of the stages; but in some cases the device fails for
-         * external events (as a failure of master connection) while
-         * the activation sequence is running and so we need to ensure
-         * that the chain is terminated here.
-         */
-        _cancel_activation(self);
-
-        sett_conn = nm_device_get_settings_connection(self);
-        _LOGW(LOGD_DEVICE | LOGD_WIFI,
-              "Activation: failed for connection '%s'",
-              sett_conn ? nm_settings_connection_get_id(sett_conn) : "<unknown>");
-
-        /* Notify any slaves of the unexpected failure */
-        nm_device_master_release_slaves(self);
-
-        /* If the connection doesn't yet have a timestamp, set it to zero so that
-         * we can distinguish between connections we've tried to activate and have
-         * failed (zero timestamp), connections that succeeded (non-zero timestamp),
-         * and those we haven't tried yet (no timestamp).
-         */
-        if (sett_conn && !nm_settings_connection_get_timestamp(sett_conn, NULL))
-            nm_settings_connection_update_timestamp(sett_conn, (guint64) 0);
-
-        if (priv->ifindex > 0
-            && (s_sriov = nm_device_get_applied_setting(self, NM_TYPE_SETTING_SRIOV))) {
-            priv->sriov_reset_pending++;
-            sriov_op_queue(self, 0, NM_TERNARY_TRUE, sriov_reset_on_failure_cb, self);
-            break;
-        }
-        /* Schedule the transition to DISCONNECTED.  The device can't transition
-         * immediately because we can't change states again from the state
-         * handler for a variety of reasons.
-         */
-        nm_device_queue_state(self, NM_DEVICE_STATE_DISCONNECTED, NM_DEVICE_STATE_REASON_NONE);
-        break;
-    case NM_DEVICE_STATE_IP_CHECK:
-        if (priv->fw_state >= FIREWALL_STATE_INITIALIZED && priv->ip_iface
-            && !nm_device_sys_iface_state_is_external(self)) {
-            priv->fw_state = FIREWALL_STATE_WAIT_IP_CONFIG;
-            fw_change_zone(self);
-        } else
-            nm_device_start_ip_check(self);
-
-        /* IP-related properties are only valid when the device has IP configuration;
-         * now that it does, ensure their change notifications are emitted.
-         */
-        notify_ip_properties(self);
-        break;
-    case NM_DEVICE_STATE_SECONDARIES:
-        ip_check_gw_ping_cleanup(self);
-        _LOGD(LOGD_DEVICE, "device entered SECONDARIES state");
-        break;
-    default:
-        break;
-    }
-
-    if (state > NM_DEVICE_STATE_DISCONNECTED)
-        delete_on_deactivate_unschedule(self);
-
-    if ((old_state == NM_DEVICE_STATE_ACTIVATED || old_state == NM_DEVICE_STATE_DEACTIVATING)
-        && (state != NM_DEVICE_STATE_DEACTIVATING)) {
-        if (quitting) {
-            nm_dispatcher_call_device_sync(NM_DISPATCHER_ACTION_DOWN, self, req);
-        } else {
-            nm_dispatcher_call_device(NM_DISPATCHER_ACTION_DOWN, self, req, NULL, NULL, NULL);
-        }
-    }
-
-    /* IP-related properties are only valid when the device has IP configuration.
-     * If it no longer does, ensure their change notifications are emitted.
-     */
-    if (ip_config_valid(old_state) && !ip_config_valid(state))
-        notify_ip_properties(self);
-
-    concheck_now = NM_IN_SET(state, NM_DEVICE_STATE_ACTIVATED, NM_DEVICE_STATE_DISCONNECTED)
-                   || old_state >= NM_DEVICE_STATE_ACTIVATED;
-    concheck_update_interval(self, AF_INET, concheck_now);
-    concheck_update_interval(self, AF_INET6, concheck_now);
-
-    priv->in_state_changed = FALSE;
-    nm_device_remove_pending_action(self, NM_PENDING_ACTION_IN_STATE_CHANGE, TRUE);
-
-    if ((old_state > NM_DEVICE_STATE_UNMANAGED) != (state > NM_DEVICE_STATE_UNMANAGED))
-        _notify(self, PROP_MANAGED);
-}
-
-void
-nm_device_state_changed(NMDevice *self, NMDeviceState state, NMDeviceStateReason reason)
-{
-    _set_state_full(self, state, reason, FALSE);
-}
-
-static gboolean
-queued_state_set(gpointer user_data)
-{
-    NMDevice *          self = NM_DEVICE(user_data);
-    NMDevicePrivate *   priv = NM_DEVICE_GET_PRIVATE(self);
-    NMDeviceState       new_state;
-    NMDeviceStateReason new_reason;
-
-    nm_assert(priv->queued_state.id);
-
-    _LOGD(LOGD_DEVICE,
-          "queue-state[%s, reason:%s, id:%u]: %s",
-          nm_device_state_to_str(priv->queued_state.state),
-          reason_to_string_a(priv->queued_state.reason),
-          priv->queued_state.id,
-          "change state");
-
-    /* Clear queued state struct before triggering state change, since
-     * the state change may queue another state.
-     */
-    priv->queued_state.id = 0;
-    new_state             = priv->queued_state.state;
-    new_reason            = priv->queued_state.reason;
-
-    nm_device_state_changed(self, new_state, new_reason);
-    nm_device_remove_pending_action(self, queued_state_to_string(new_state), TRUE);
-
-    return G_SOURCE_REMOVE;
-}
-
-void
-nm_device_queue_state(NMDevice *self, NMDeviceState state, NMDeviceStateReason reason)
-{
-    NMDevicePrivate *priv;
-
-    g_return_if_fail(NM_IS_DEVICE(self));
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->queued_state.id && priv->queued_state.state == state) {
-        _LOGD(LOGD_DEVICE,
-              "queue-state[%s, reason:%s, id:%u]: %s%s%s%s",
-              nm_device_state_to_str(priv->queued_state.state),
-              reason_to_string_a(priv->queued_state.reason),
-              priv->queued_state.id,
-              "ignore queuing same state change",
-              NM_PRINT_FMT_QUOTED(priv->queued_state.reason != reason,
-                                  " (reason differs: ",
-                                  reason_to_string_a(reason),
-                                  ")",
-                                  ""));
-        return;
-    }
-
-    /* Add pending action for the new state before clearing the queued states, so
-     * that we don't accidentally pop all pending states and reach 'startup complete'  */
-    nm_device_add_pending_action(self, queued_state_to_string(state), TRUE);
-
-    /* We should only ever have one delayed state transition at a time */
-    if (priv->queued_state.id) {
-        _LOGW(LOGD_DEVICE,
-              "queue-state[%s, reason:%s, id:%u]: %s",
-              nm_device_state_to_str(priv->queued_state.state),
-              reason_to_string_a(priv->queued_state.reason),
-              priv->queued_state.id,
-              "replace previously queued state change");
-        nm_clear_g_source(&priv->queued_state.id);
-        nm_device_remove_pending_action(self,
-                                        queued_state_to_string(priv->queued_state.state),
-                                        TRUE);
-    }
-
-    priv->queued_state.state  = state;
-    priv->queued_state.reason = reason;
-    priv->queued_state.id     = g_idle_add(queued_state_set, self);
-
-    _LOGD(LOGD_DEVICE,
-          "queue-state[%s, reason:%s, id:%u]: %s",
-          nm_device_state_to_str(state),
-          reason_to_string_a(reason),
-          priv->queued_state.id,
-          "queue state change");
-}
-
-static void
-queued_state_clear(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!priv->queued_state.id)
-        return;
-
-    _LOGD(LOGD_DEVICE,
-          "queue-state[%s, reason:%s, id:%u]: %s",
-          nm_device_state_to_str(priv->queued_state.state),
-          reason_to_string_a(priv->queued_state.reason),
-          priv->queued_state.id,
-          "clear queued state change");
-    nm_clear_g_source(&priv->queued_state.id);
-    nm_device_remove_pending_action(self, queued_state_to_string(priv->queued_state.state), TRUE);
-}
-
-NMDeviceState
-nm_device_get_state(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), NM_DEVICE_STATE_UNKNOWN);
-
-    return NM_DEVICE_GET_PRIVATE(self)->state;
-}
-
-/*****************************************************************************/
-/* NMConfigDevice interface related stuff */
-
-const char *
-nm_device_get_hw_address(NMDevice *self)
-{
-    NMDevicePrivate *priv;
-    char             buf[NM_UTILS_HWADDR_LEN_MAX];
-    gsize            l;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), NULL);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    nm_assert((!priv->hw_addr && priv->hw_addr_len == 0)
-              || (priv->hw_addr && _nm_utils_hwaddr_aton(priv->hw_addr, buf, sizeof(buf), &l)
-                  && l == priv->hw_addr_len));
-
-    return priv->hw_addr;
-}
-
-gboolean
-nm_device_update_hw_address(NMDevice *self)
-{
-    NMDevicePrivate *priv;
-    const guint8 *   hwaddr;
-    gsize            hwaddrlen = 0;
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-    if (priv->ifindex <= 0)
-        return FALSE;
-
-    hwaddr = nm_platform_link_get_address(nm_device_get_platform(self), priv->ifindex, &hwaddrlen);
-
-    if (priv->type == NM_DEVICE_TYPE_ETHERNET && hwaddr
-        && nm_utils_hwaddr_matches(hwaddr,
-                                   hwaddrlen,
-                                   &nm_ether_addr_zero,
-                                   sizeof(nm_ether_addr_zero)))
-        hwaddrlen = 0;
-
-    if (!hwaddrlen)
-        return FALSE;
-
-    if (priv->hw_addr_len && priv->hw_addr_len != hwaddrlen) {
-        char s_buf[NM_UTILS_HWADDR_LEN_MAX_STR];
-
-        /* we cannot change the address length of a device once it is set (except
-         * unrealizing the device).
-         *
-         * The reason is that the permanent and initial MAC addresses also must have the
-         * same address length, so it's unclear what it would mean that the length changes. */
-        _LOGD(LOGD_PLATFORM | LOGD_DEVICE,
-              "hw-addr: read a MAC address with differing length (%s vs. %s)",
-              priv->hw_addr,
-              _nm_utils_hwaddr_ntoa(hwaddr, hwaddrlen, TRUE, s_buf, sizeof(s_buf)));
-        return FALSE;
-    }
-
-    if (priv->hw_addr && nm_utils_hwaddr_matches(priv->hw_addr, -1, hwaddr, hwaddrlen))
-        return FALSE;
-
-    g_free(priv->hw_addr);
-    priv->hw_addr_len_ = hwaddrlen;
-    priv->hw_addr      = nm_utils_hwaddr_ntoa(hwaddr, hwaddrlen);
-
-    _LOGD(LOGD_PLATFORM | LOGD_DEVICE, "hw-addr: hardware address now %s", priv->hw_addr);
-    _notify(self, PROP_HW_ADDRESS);
-
-    if (!priv->hw_addr_initial
-        || (priv->hw_addr_type == HW_ADDR_TYPE_UNSET && priv->state < NM_DEVICE_STATE_PREPARE
-            && !nm_device_is_activating(self))) {
-        /* when we get a hw_addr the first time or while the device
-         * is not activated (with no explicit hw address set), always
-         * update our initial hw-address as well. */
-        nm_device_update_initial_hw_address(self);
-    }
-    return TRUE;
-}
-
-void
-nm_device_update_initial_hw_address(NMDevice *self)
-{
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->hw_addr && !nm_streq0(priv->hw_addr_initial, priv->hw_addr)) {
-        if (priv->hw_addr_initial && priv->hw_addr_type != HW_ADDR_TYPE_UNSET) {
-            /* once we have the initial hw address set, we only allow
-             * update if the currently type is "unset". */
-            return;
-        }
-        g_free(priv->hw_addr_initial);
-        priv->hw_addr_initial = g_strdup(priv->hw_addr);
-        _LOGD(LOGD_DEVICE, "hw-addr: update initial MAC address %s", priv->hw_addr_initial);
-    }
-}
-
-void
-nm_device_update_permanent_hw_address(NMDevice *self, gboolean force_freeze)
-{
-    NMDevicePrivate *              priv = NM_DEVICE_GET_PRIVATE(self);
-    guint8                         buf[NM_UTILS_HWADDR_LEN_MAX];
-    size_t                         len = 0;
-    gboolean                       success_read;
-    int                            ifindex;
-    const NMPlatformLink *         pllink;
-    const NMConfigDeviceStateData *dev_state;
-
-    if (priv->hw_addr_perm) {
-        /* the permanent hardware address is only read once and not
-         * re-read later.
-         *
-         * Except during unrealize/realize cycles, where we clear the permanent
-         * hardware address during unrealization. */
-        return;
-    }
-
-    ifindex = priv->ifindex;
-    if (ifindex <= 0)
-        return;
-
-    /* the user is advised to configure stable MAC addresses for software devices via
-     * UDEV. Thus, check whether the link is fully initialized. */
-    pllink = nm_platform_link_get(nm_device_get_platform(self), ifindex);
-    if (!pllink || !pllink->initialized) {
-        if (!force_freeze) {
-            /* we can afford to wait. Back off and leave the permanent MAC address
-             * undecided for now. */
-            return;
-        }
-        /* try to refresh the link just to give UDEV a bit more time... */
-        nm_platform_link_refresh(nm_device_get_platform(self), ifindex);
-        /* maybe the MAC address changed... */
-        nm_device_update_hw_address(self);
-    } else if (!priv->hw_addr_len)
-        nm_device_update_hw_address(self);
-
-    if (!priv->hw_addr_len) {
-        /* we need the current MAC address because we require the permanent MAC address
-         * to have the same length as the current address.
-         *
-         * Abort if there is no current MAC address. */
-        return;
-    }
-
-    success_read =
-        nm_platform_link_get_permanent_address(nm_device_get_platform(self), ifindex, buf, &len);
-    if (success_read && priv->hw_addr_len == len) {
-        priv->hw_addr_perm_fake = FALSE;
-        priv->hw_addr_perm      = nm_utils_hwaddr_ntoa(buf, len);
-        _LOGD(LOGD_DEVICE, "hw-addr: read permanent MAC address '%s'", priv->hw_addr_perm);
-        goto notify_and_out;
-    }
-
-    /* we failed to read a permanent MAC address, thus we use a fake address,
-     * that is the current MAC address of the device.
-     *
-     * Note that the permanet MAC address of a NMDevice instance does not change
-     * after being set once. Thus, we use now a fake address and stick to that
-     * (until we unrealize the device). */
-    priv->hw_addr_perm_fake = TRUE;
-
-    /* We also persist our choice of the fake address to the device state
-     * file to use the same address on restart of NetworkManager.
-     * First, try to reload the address from the state file. */
-    dev_state = nm_config_device_state_get(nm_config_get(), ifindex);
-    if (dev_state && dev_state->perm_hw_addr_fake
-        && nm_utils_hwaddr_aton(dev_state->perm_hw_addr_fake, buf, priv->hw_addr_len)
-        && !nm_utils_hwaddr_matches(buf, priv->hw_addr_len, priv->hw_addr, -1)) {
-        _LOGD(LOGD_PLATFORM | LOGD_ETHER,
-              "hw-addr: %s (use from statefile: %s, current: %s)",
-              success_read ? "read HW addr length of permanent MAC address differs"
-                           : "unable to read permanent MAC address",
-              dev_state->perm_hw_addr_fake,
-              priv->hw_addr);
-        priv->hw_addr_perm = nm_utils_hwaddr_ntoa(buf, priv->hw_addr_len);
-        goto notify_and_out;
-    }
-
-    _LOGD(LOGD_PLATFORM | LOGD_ETHER,
-          "hw-addr: %s (use current: %s)",
-          success_read ? "read HW addr length of permanent MAC address differs"
-                       : "unable to read permanent MAC address",
-          priv->hw_addr);
-    priv->hw_addr_perm = g_strdup(priv->hw_addr);
-
-notify_and_out:
-    _notify(self, PROP_PERM_HW_ADDRESS);
-}
-
-gboolean
-nm_device_hw_addr_is_explict(NMDevice *self)
-{
-    NMDevicePrivate *priv;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-    return !NM_IN_SET((HwAddrType) priv->hw_addr_type, HW_ADDR_TYPE_PERMANENT, HW_ADDR_TYPE_UNSET);
-}
-
-static gboolean
-_hw_addr_matches(NMDevice *self, const guint8 *addr, gsize addr_len)
-{
-    const char *cur_addr;
-
-    cur_addr = nm_device_get_hw_address(self);
-    return cur_addr && nm_utils_hwaddr_matches(addr, addr_len, cur_addr, -1);
-}
-
-static gboolean
-_hw_addr_set(NMDevice *        self,
-             const char *const addr,
-             const char *const operation,
-             const char *const detail)
-{
-    NMDevicePrivate *priv;
-    gboolean         success = FALSE;
-    int              r;
-    guint8           addr_bytes[NM_UTILS_HWADDR_LEN_MAX];
-    gsize            addr_len;
-    gboolean         was_taken_down = FALSE;
-    gboolean         retry_down;
-
-    nm_assert(NM_IS_DEVICE(self));
-    nm_assert(addr);
-    nm_assert(operation);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!_nm_utils_hwaddr_aton(addr, addr_bytes, sizeof(addr_bytes), &addr_len))
-        g_return_val_if_reached(FALSE);
-
-    /* Do nothing if current MAC is same */
-    if (_hw_addr_matches(self, addr_bytes, addr_len)) {
-        _LOGT(LOGD_DEVICE, "set-hw-addr: no MAC address change needed (%s)", addr);
-        return TRUE;
-    }
-
-    if (priv->hw_addr_len && priv->hw_addr_len != addr_len) {
-        _LOGT(LOGD_DEVICE,
-              "set-hw-addr: setting MAC address to '%s' (%s, %s) failed because of wrong address "
-              "length (should be %u bytes)",
-              addr,
-              operation,
-              detail,
-              priv->hw_addr_len);
-        return FALSE;
-    }
-
-    _LOGT(LOGD_DEVICE,
-          "set-hw-addr: setting MAC address to '%s' (%s, %s)...",
-          addr,
-          operation,
-          detail);
-
-    if (nm_device_get_device_type(self) == NM_DEVICE_TYPE_WIFI) {
-        /* Always take the device down for Wi-Fi because
-         * wpa_supplicant needs it to properly detect the MAC
-         * change. */
-        retry_down     = FALSE;
-        was_taken_down = TRUE;
-        nm_device_take_down(self, FALSE);
-    }
-
-again:
-    r       = nm_platform_link_set_address(nm_device_get_platform(self),
-                                     nm_device_get_ip_ifindex(self),
-                                     addr_bytes,
-                                     addr_len);
-    success = (r >= 0);
-    if (!success) {
-        retry_down =
-            !was_taken_down && r != -NME_PL_NOT_FOUND
-            && nm_platform_link_is_up(nm_device_get_platform(self), nm_device_get_ip_ifindex(self));
-        _NMLOG((retry_down || r == -NME_PL_NOT_FOUND) ? LOGL_DEBUG : LOGL_WARN,
-               LOGD_DEVICE,
-               "set-hw-addr: failed to %s MAC address to %s (%s) (%s)%s",
-               operation,
-               addr,
-               detail,
-               nm_strerror(r),
-               retry_down ? " (retry with taking down)" : "");
-    } else {
-        /* MAC address successfully changed; update the current MAC to match */
-        nm_device_update_hw_address(self);
-
-        if (!_hw_addr_matches(self, addr_bytes, addr_len)) {
-            gint64 poll_end, now;
-
-            _LOGD(LOGD_DEVICE,
-                  "set-hw-addr: new MAC address %s not successfully %s (%s) (refresh link)",
-                  addr,
-                  operation,
-                  detail);
-
-            /* The platform call indicated success, however the address is not
-             * as expected. That is either due to a driver issue (brcmfmac, bgo#770456,
-             * rh#1374023) or a race where externally the MAC address was reset.
-             * The race is rather unlikely.
-             *
-             * The alternative would be to postpone the activation in case the
-             * MAC address is not yet ready and poll without blocking. However,
-             * that is rather complicated and it is not expected that this case
-             * happens for regular drivers.
-             * Note that brcmfmac can block NetworkManager for 500 msec while
-             * taking down the device. Let's add another 100 msec to that.
-             *
-             * wait/poll up to 100 msec until it changes. */
-
-            poll_end = nm_utils_get_monotonic_timestamp_usec() + (100 * 1000);
-            for (;;) {
-                if (!nm_platform_link_refresh(nm_device_get_platform(self),
-                                              nm_device_get_ip_ifindex(self)))
-                    goto handle_fail;
-                if (!nm_device_update_hw_address(self))
-                    goto handle_wait;
-                if (!_hw_addr_matches(self, addr_bytes, addr_len))
-                    goto handle_fail;
-
-                break;
-handle_wait:
-                now = nm_utils_get_monotonic_timestamp_usec();
-                if (now < poll_end) {
-                    g_usleep(NM_MIN(poll_end - now, 500));
-                    continue;
-                }
-handle_fail:
-                success = FALSE;
-                break;
-            }
-        }
-
-        if (success) {
-            retry_down = FALSE;
-            _LOGI(LOGD_DEVICE, "set-hw-addr: %s MAC address to %s (%s)", operation, addr, detail);
-        } else {
-            retry_down = !was_taken_down
-                         && nm_platform_link_is_up(nm_device_get_platform(self),
-                                                   nm_device_get_ip_ifindex(self));
-
-            _NMLOG(retry_down ? LOGL_DEBUG : LOGL_WARN,
-                   LOGD_DEVICE,
-                   "set-hw-addr: new MAC address %s not successfully %s (%s)%s",
-                   addr,
-                   operation,
-                   detail,
-                   retry_down ? " (retry with taking down)" : "");
-        }
-    }
-
-    if (retry_down) {
-        /* changing the MAC address failed, but also the device was up (and we did not yet try to take
-         * it down). Optimally, we change the MAC address without taking the device down, but some
-         * devices don't like that. So, retry with taking the device down. */
-        retry_down     = FALSE;
-        was_taken_down = TRUE;
-        nm_device_take_down(self, FALSE);
-        goto again;
-    }
-
-    if (was_taken_down) {
-        if (!nm_device_bring_up(self, TRUE, NULL))
-            return FALSE;
-    }
-
-    return success;
-}
-
-gboolean
-nm_device_hw_addr_set(NMDevice *self, const char *addr, const char *detail, gboolean set_permanent)
-{
-    NMDevicePrivate *priv;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!addr)
-        g_return_val_if_reached(FALSE);
-
-    if (set_permanent) {
-        /* The type is set to PERMANENT by NMDeviceVlan when taking the MAC
-         * address from the parent and by NMDeviceWifi when setting a random MAC
-         * address during scanning.
-         */
-        priv->hw_addr_type = HW_ADDR_TYPE_PERMANENT;
-    }
-
-    return _hw_addr_set(self, addr, "set", detail);
-}
-
-/*
- * _hw_addr_get_cloned:
- * @self: a #NMDevice
- * @connection: a #NMConnection
- * @is_wifi: whether the device is Wi-Fi
- * @preserve: (out): whether the address must be reset to initial one
- * @hwaddr: (out): the cloned MAC address to set on interface
- * @hwaddr_type: (out): the type of address to set
- * @hwaddr_detail: (out): the detail (origin) of address to set
- * @error: (out): on return, an error or %NULL
- *
- * Computes the MAC to be set on a interface. On success, one of the
- * following exclusive conditions are verified:
- *
- *  - @preserve is %TRUE: the address must be reset to the initial one
- *  - @hwaddr is not %NULL: the given address must be set on the device
- *  - @hwaddr is %NULL and @preserve is %FALSE: no action needed
- *
- * Returns: %FALSE in case of error in determining the cloned MAC address,
- * %TRUE otherwise
- */
-static gboolean
-_hw_addr_get_cloned(NMDevice *    self,
-                    NMConnection *connection,
-                    gboolean      is_wifi,
-                    gboolean *    preserve,
-                    char **       hwaddr,
-                    HwAddrType *  hwaddr_type,
-                    char **       hwaddr_detail,
-                    GError **     error)
-{
-    NMDevicePrivate *priv;
-    gs_free char *   addr_setting_free             = NULL;
-    gs_free char *   hw_addr_generated             = NULL;
-    gs_free char *   generate_mac_address_mask_tmp = NULL;
-    const char *     addr, *addr_setting;
-    char *           addr_out;
-    HwAddrType       type_out;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-    g_return_val_if_fail(NM_IS_CONNECTION(connection), FALSE);
-    g_return_val_if_fail(!error || !*error, FALSE);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!connection)
-        g_return_val_if_reached(FALSE);
-
-    addr = addr_setting =
-        _prop_get_x_cloned_mac_address(self, connection, is_wifi, &addr_setting_free);
-
-    if (nm_streq(addr, NM_CLONED_MAC_PRESERVE)) {
-        /* "preserve" means to reset the initial MAC address. */
-        NM_SET_OUT(preserve, TRUE);
-        NM_SET_OUT(hwaddr, NULL);
-        NM_SET_OUT(hwaddr_type, HW_ADDR_TYPE_UNSET);
-        NM_SET_OUT(hwaddr_detail, g_steal_pointer(&addr_setting_free) ?: g_strdup(addr_setting));
-        return TRUE;
-    }
-
-    if (nm_streq(addr, NM_CLONED_MAC_PERMANENT)) {
-        gboolean is_fake;
-
-        addr = nm_device_get_permanent_hw_address_full(self, TRUE, &is_fake);
-        if (is_fake) {
-            /* Preserve the current address if the permanent address if fake */
-            NM_SET_OUT(preserve, TRUE);
-            NM_SET_OUT(hwaddr, NULL);
-            NM_SET_OUT(hwaddr_type, HW_ADDR_TYPE_UNSET);
-            NM_SET_OUT(hwaddr_detail,
-                       g_steal_pointer(&addr_setting_free) ?: g_strdup(addr_setting));
-            return TRUE;
-        } else if (!addr) {
-            g_set_error_literal(error,
-                                NM_DEVICE_ERROR,
-                                NM_DEVICE_ERROR_FAILED,
-                                "failed to retrieve permanent address");
-            return FALSE;
-        }
-        addr_out = g_strdup(addr);
-        type_out = HW_ADDR_TYPE_PERMANENT;
-    } else if (NM_IN_STRSET(addr, NM_CLONED_MAC_RANDOM)) {
-        if (priv->hw_addr_type == HW_ADDR_TYPE_GENERATED) {
-            /* hm, we already use a generate MAC address. Most certainly, that is from the same
-             * activation request, so we should not create a new random address, instead keep
-             * the current. */
-            goto out_no_action;
-        }
-        hw_addr_generated = nm_utils_hw_addr_gen_random_eth(
-            nm_device_get_initial_hw_address(self),
-            _prop_get_x_generate_mac_address_mask(self,
-                                                  connection,
-                                                  is_wifi,
-                                                  &generate_mac_address_mask_tmp));
-        if (!hw_addr_generated) {
-            g_set_error(error,
-                        NM_DEVICE_ERROR,
-                        NM_DEVICE_ERROR_FAILED,
-                        "failed to generate %s MAC address",
-                        "random");
-            return FALSE;
-        }
-
-        addr_out = g_steal_pointer(&hw_addr_generated);
-        type_out = HW_ADDR_TYPE_GENERATED;
-    } else if (NM_IN_STRSET(addr, NM_CLONED_MAC_STABLE)) {
-        NMUtilsStableType stable_type;
-        const char *      stable_id;
-
-        if (priv->hw_addr_type == HW_ADDR_TYPE_GENERATED) {
-            /* hm, we already use a generate MAC address. Most certainly, that is from the same
-             * activation request, so let's skip creating the stable address anew. */
-            goto out_no_action;
-        }
-
-        stable_id         = _prop_get_connection_stable_id(self, connection, &stable_type);
-        hw_addr_generated = nm_utils_hw_addr_gen_stable_eth(
-            stable_type,
-            stable_id,
-            nm_device_get_ip_iface(self),
-            nm_device_get_initial_hw_address(self),
-            _prop_get_x_generate_mac_address_mask(self,
-                                                  connection,
-                                                  is_wifi,
-                                                  &generate_mac_address_mask_tmp));
-        if (!hw_addr_generated) {
-            g_set_error(error,
-                        NM_DEVICE_ERROR,
-                        NM_DEVICE_ERROR_FAILED,
-                        "failed to generate %s MAC address",
-                        "stable");
-            return FALSE;
-        }
-
-        addr_out = g_steal_pointer(&hw_addr_generated);
-        type_out = HW_ADDR_TYPE_GENERATED;
-    } else {
-        /* this must be a valid address. Otherwise, we shouldn't come here. */
-        if (!nm_utils_hwaddr_valid(addr, -1))
-            g_return_val_if_reached(FALSE);
-
-        addr_out = g_strdup(addr);
-        type_out = HW_ADDR_TYPE_EXPLICIT;
-    }
-
-    NM_SET_OUT(preserve, FALSE);
-    NM_SET_OUT(hwaddr, addr_out);
-    NM_SET_OUT(hwaddr_type, type_out);
-    NM_SET_OUT(hwaddr_detail, g_steal_pointer(&addr_setting_free) ?: g_strdup(addr_setting));
-    return TRUE;
-out_no_action:
-    NM_SET_OUT(preserve, FALSE);
-    NM_SET_OUT(hwaddr, NULL);
-    NM_SET_OUT(hwaddr_type, HW_ADDR_TYPE_UNSET);
-    NM_SET_OUT(hwaddr_detail, NULL);
-    return TRUE;
-}
-
-gboolean
-nm_device_hw_addr_get_cloned(NMDevice *    self,
-                             NMConnection *connection,
-                             gboolean      is_wifi,
-                             char **       hwaddr,
-                             gboolean *    preserve,
-                             GError **     error)
-{
-    if (!_hw_addr_get_cloned(self, connection, is_wifi, preserve, hwaddr, NULL, NULL, error))
-        return FALSE;
-
-    return TRUE;
-}
-
-gboolean
-nm_device_hw_addr_set_cloned(NMDevice *self, NMConnection *connection, gboolean is_wifi)
-{
-    NMDevicePrivate *priv;
-    gboolean         preserve   = FALSE;
-    gs_free char *   hwaddr     = NULL;
-    gs_free char *   detail     = NULL;
-    HwAddrType       type       = HW_ADDR_TYPE_UNSET;
-    gs_free_error GError *error = NULL;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!_hw_addr_get_cloned(self,
-                             connection,
-                             is_wifi,
-                             &preserve,
-                             &hwaddr,
-                             &type,
-                             &detail,
-                             &error)) {
-        _LOGW(LOGD_DEVICE, "set-hw-addr: %s", error->message);
-        return FALSE;
-    }
-
-    if (preserve)
-        return nm_device_hw_addr_reset(self, detail);
-
-    if (hwaddr) {
-        priv->hw_addr_type = type;
-        return _hw_addr_set(self, hwaddr, "set-cloned", detail);
-    }
-
-    return TRUE;
-}
-
-gboolean
-nm_device_hw_addr_reset(NMDevice *self, const char *detail)
-{
-    NMDevicePrivate *priv;
-    const char *     addr;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->hw_addr_type == HW_ADDR_TYPE_UNSET)
-        return TRUE;
-
-    priv->hw_addr_type = HW_ADDR_TYPE_UNSET;
-    addr               = nm_device_get_initial_hw_address(self);
-    if (!addr) {
-        /* as hw_addr_type is not UNSET, we expect that we can get an
-         * initial address to which to reset. */
-        g_return_val_if_reached(FALSE);
-    }
-
-    return _hw_addr_set(self, addr, "reset", detail);
-}
-
-const char *
-nm_device_get_permanent_hw_address_full(NMDevice *self,
-                                        gboolean  force_freeze,
-                                        gboolean *out_is_fake)
-{
-    NMDevicePrivate *priv;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), NULL);
-
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (!priv->hw_addr_perm && force_freeze) {
-        /* somebody requests a permanent MAC address, but we don't have it set
-         * yet. We cannot delay it any longer and try to get it without waiting
-         * for UDEV. */
-        nm_device_update_permanent_hw_address(self, TRUE);
-    }
-
-    NM_SET_OUT(out_is_fake, priv->hw_addr_perm && priv->hw_addr_perm_fake);
-    return priv->hw_addr_perm;
-}
-
-const char *
-nm_device_get_permanent_hw_address(NMDevice *self)
-{
-    return nm_device_get_permanent_hw_address_full(self, TRUE, NULL);
-}
-
-const char *
-nm_device_get_initial_hw_address(NMDevice *self)
-{
-    g_return_val_if_fail(NM_IS_DEVICE(self), NULL);
-
-    return NM_DEVICE_GET_PRIVATE(self)->hw_addr_initial;
-}
-
-/**
- * nm_device_spec_match_list:
- * @self: an #NMDevice
- * @specs: (element-type utf8): a list of device specs
- *
- * Checks if @self matches any of the specifications in @specs. The
- * currently-supported spec types are:
- *
- *     "mac:00:11:22:33:44:55" - matches a device with the given
- *     hardware address
- *
- *     "interface-name:foo0" - matches a device with the given
- *     interface name
- *
- *     "s390-subchannels:00.11.22" - matches a device with the given
- *     z/VM / s390 subchannels.
- *
- *     "*" - matches any device
- *
- * Returns: #TRUE if @self matches one of the specs in @specs
- */
-gboolean
-nm_device_spec_match_list(NMDevice *self, const GSList *specs)
-{
-    return nm_device_spec_match_list_full(self, specs, FALSE);
-}
-
-int
-nm_device_spec_match_list_full(NMDevice *self, const GSList *specs, int no_match_value)
-{
-    NMDeviceClass *      klass;
-    NMMatchSpecMatchType m;
-    const char *         hw_address = NULL;
-    gboolean             is_fake;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    klass      = NM_DEVICE_GET_CLASS(self);
-    hw_address = nm_device_get_permanent_hw_address_full(
-        self,
-        !nm_device_get_unmanaged_flags(self, NM_UNMANAGED_PLATFORM_INIT),
-        &is_fake);
-
-    m = nm_match_spec_device(specs,
-                             nm_device_get_iface(self),
-                             nm_device_get_type_description(self),
-                             nm_device_get_driver(self),
-                             nm_device_get_driver_version(self),
-                             is_fake ? NULL : hw_address,
-                             klass->get_s390_subchannels ? klass->get_s390_subchannels(self) : NULL,
-                             nm_dhcp_manager_get_config(nm_dhcp_manager_get()));
-
-    switch (m) {
-    case NM_MATCH_SPEC_MATCH:
-        return TRUE;
-    case NM_MATCH_SPEC_NEG_MATCH:
-        return FALSE;
-    case NM_MATCH_SPEC_NO_MATCH:
-        return no_match_value;
-    }
-    nm_assert_not_reached();
-    return no_match_value;
-}
-
-guint
-nm_device_get_supplicant_timeout(NMDevice *self)
-{
-    NMConnection *  connection;
-    NMSetting8021x *s_8021x;
-    int             timeout;
-#define SUPPLICANT_DEFAULT_TIMEOUT 25
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), SUPPLICANT_DEFAULT_TIMEOUT);
-
-    connection = nm_device_get_applied_connection(self);
-
-    g_return_val_if_fail(connection, SUPPLICANT_DEFAULT_TIMEOUT);
-
-    s_8021x = nm_connection_get_setting_802_1x(connection);
-    if (s_8021x) {
-        timeout = nm_setting_802_1x_get_auth_timeout(s_8021x);
-        if (timeout > 0)
-            return timeout;
-    }
-
-    return nm_config_data_get_connection_default_int64(NM_CONFIG_GET_DATA,
-                                                       NM_CON_DEFAULT("802-1x.auth-timeout"),
-                                                       self,
-                                                       1,
-                                                       G_MAXINT32,
-                                                       SUPPLICANT_DEFAULT_TIMEOUT);
-}
-
-gboolean
-nm_device_auth_retries_try_next(NMDevice *self)
-{
-    NMDevicePrivate *    priv;
-    NMSettingConnection *s_con;
-    int                  auth_retries;
-
-    g_return_val_if_fail(NM_IS_DEVICE(self), FALSE);
-
-    priv         = NM_DEVICE_GET_PRIVATE(self);
-    auth_retries = priv->auth_retries;
-
-    if (G_UNLIKELY(auth_retries == NM_DEVICE_AUTH_RETRIES_UNSET)) {
-        auth_retries = -1;
-
-        s_con = nm_device_get_applied_setting(self, NM_TYPE_SETTING_CONNECTION);
-        if (s_con)
-            auth_retries = nm_setting_connection_get_auth_retries(s_con);
-
-        if (auth_retries == -1) {
-            auth_retries = nm_config_data_get_connection_default_int64(
-                NM_CONFIG_GET_DATA,
-                NM_CON_DEFAULT("connection.auth-retries"),
-                self,
-                -1,
-                G_MAXINT32,
-                -1);
-        }
-
-        if (auth_retries == 0)
-            auth_retries = NM_DEVICE_AUTH_RETRIES_INFINITY;
-        else if (auth_retries == -1)
-            auth_retries = NM_DEVICE_AUTH_RETRIES_DEFAULT;
-        else
-            nm_assert(auth_retries > 0);
-
-        priv->auth_retries = auth_retries;
-    }
-
-    if (auth_retries == NM_DEVICE_AUTH_RETRIES_INFINITY)
-        return TRUE;
-    if (auth_retries <= 0) {
-        nm_assert(auth_retries == 0);
-        return FALSE;
-    }
-    priv->auth_retries--;
-    return TRUE;
-}
-
-/*****************************************************************************/
-
-static const char *
-_activation_func_to_string(ActivationHandleFunc func)
-{
-#define FUNC_TO_STRING_CHECK_AND_RETURN(func, f) \
-    G_STMT_START                                 \
-    {                                            \
-        if ((func) == (f))                       \
-            return #f;                           \
-    }                                            \
-    G_STMT_END
-    FUNC_TO_STRING_CHECK_AND_RETURN(func, activate_stage1_device_prepare);
-    FUNC_TO_STRING_CHECK_AND_RETURN(func, activate_stage2_device_config);
-    FUNC_TO_STRING_CHECK_AND_RETURN(func, activate_stage3_ip_config_start);
-    FUNC_TO_STRING_CHECK_AND_RETURN(func, activate_stage4_ip_config_timeout_4);
-    FUNC_TO_STRING_CHECK_AND_RETURN(func, activate_stage4_ip_config_timeout_6);
-    FUNC_TO_STRING_CHECK_AND_RETURN(func, activate_stage5_ip_config_result_4);
-    FUNC_TO_STRING_CHECK_AND_RETURN(func, activate_stage5_ip_config_result_6);
-    g_return_val_if_reached("unknown");
-}
-
-/*****************************************************************************/
-
-static void
-get_property(GObject *object, guint prop_id, GValue *value, GParamSpec *pspec)
-{
-    NMDevice *       self = NM_DEVICE(object);
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    GVariantBuilder  array_builder;
-
-    switch (prop_id) {
-    case PROP_UDI:
-        /* UDI is (depending on the device type) a path to sysfs and can contain
-         * non-UTF-8.
-         *   ip link add name $'d\xccf\\c' type dummy  */
-        g_value_take_string(
-            value,
-            nm_utils_str_utf8safe_escape_cp(priv->udi, NM_UTILS_STR_UTF8_SAFE_FLAG_NONE));
-        break;
-    case PROP_PATH:
-        g_value_take_string(
-            value,
-            nm_utils_str_utf8safe_escape_cp(priv->path, NM_UTILS_STR_UTF8_SAFE_FLAG_NONE));
-        break;
-    case PROP_IFACE:
-        g_value_take_string(
-            value,
-            nm_utils_str_utf8safe_escape_cp(priv->iface, NM_UTILS_STR_UTF8_SAFE_FLAG_ESCAPE_CTRL));
-        break;
-    case PROP_IP_IFACE:
-        if (ip_config_valid(priv->state)) {
-            g_value_take_string(
-                value,
-                nm_utils_str_utf8safe_escape_cp(nm_device_get_ip_iface(self),
-                                                NM_UTILS_STR_UTF8_SAFE_FLAG_ESCAPE_CTRL));
-        } else
-            g_value_set_string(value, NULL);
-        break;
-    case PROP_IFINDEX:
-        g_value_set_int(value, priv->ifindex);
-        break;
-    case PROP_DRIVER:
-        g_value_take_string(
-            value,
-            nm_utils_str_utf8safe_escape_cp(priv->driver, NM_UTILS_STR_UTF8_SAFE_FLAG_ESCAPE_CTRL));
-        break;
-    case PROP_DRIVER_VERSION:
-        g_value_take_string(
-            value,
-            nm_utils_str_utf8safe_escape_cp(priv->driver_version,
-                                            NM_UTILS_STR_UTF8_SAFE_FLAG_ESCAPE_CTRL));
-        break;
-    case PROP_FIRMWARE_VERSION:
-        g_value_take_string(
-            value,
-            nm_utils_str_utf8safe_escape_cp(priv->firmware_version,
-                                            NM_UTILS_STR_UTF8_SAFE_FLAG_ESCAPE_CTRL));
-        break;
-    case PROP_CAPABILITIES:
-        g_value_set_uint(value, (priv->capabilities & ~NM_DEVICE_CAP_INTERNAL_MASK));
-        break;
-    case PROP_IP4_ADDRESS:
-        g_value_set_variant(value, nm_g_variant_singleton_u_0());
-        break;
-    case PROP_CARRIER:
-        g_value_set_boolean(value, priv->carrier);
-        break;
-    case PROP_MTU:
-        g_value_set_uint(value, priv->mtu);
-        break;
-    case PROP_IP4_CONFIG:
-        nm_dbus_utils_g_value_set_object_path(value,
-                                              ip_config_valid(priv->state) ? priv->ip_config_4
-                                                                           : NULL);
-        break;
-    case PROP_DHCP4_CONFIG:
-        nm_dbus_utils_g_value_set_object_path(
-            value,
-            ip_config_valid(priv->state) ? priv->dhcp_data_4.config : NULL);
-        break;
-    case PROP_IP6_CONFIG:
-        nm_dbus_utils_g_value_set_object_path(value,
-                                              ip_config_valid(priv->state) ? priv->ip_config_6
-                                                                           : NULL);
-        break;
-    case PROP_DHCP6_CONFIG:
-        nm_dbus_utils_g_value_set_object_path(
-            value,
-            ip_config_valid(priv->state) ? priv->dhcp_data_6.config : NULL);
-        break;
-    case PROP_STATE:
-        g_value_set_uint(value, priv->state);
-        break;
-    case PROP_STATE_REASON:
-        g_value_take_variant(value, g_variant_new("(uu)", priv->state, priv->state_reason));
-        break;
-    case PROP_ACTIVE_CONNECTION:
-        g_value_set_string(value, nm_dbus_track_obj_path_get(&priv->act_request));
-        break;
-    case PROP_DEVICE_TYPE:
-        g_value_set_uint(value, priv->type);
-        break;
-    case PROP_LINK_TYPE:
-        g_value_set_uint(value, priv->link_type);
-        break;
-    case PROP_MANAGED:
-        /* The managed state exposed on D-Bus only depends on the current device state alone. */
-        g_value_set_boolean(value, nm_device_get_state(self) > NM_DEVICE_STATE_UNMANAGED);
-        break;
-    case PROP_AUTOCONNECT:
-        g_value_set_boolean(
-            value,
-            nm_device_autoconnect_blocked_get(self, NM_DEVICE_AUTOCONNECT_BLOCKED_ALL) ? FALSE
-                                                                                       : TRUE);
-        break;
-    case PROP_FIRMWARE_MISSING:
-        g_value_set_boolean(value, priv->firmware_missing);
-        break;
-    case PROP_NM_PLUGIN_MISSING:
-        g_value_set_boolean(value, priv->nm_plugin_missing);
-        break;
-    case PROP_TYPE_DESC:
-        g_value_set_string(value, priv->type_desc);
-        break;
-    case PROP_RFKILL_TYPE:
-        g_value_set_uint(value, priv->rfkill_type);
-        break;
-    case PROP_AVAILABLE_CONNECTIONS:
-        nm_dbus_utils_g_value_set_object_path_from_hash(value, priv->available_connections, TRUE);
-        break;
-    case PROP_PHYSICAL_PORT_ID:
-        g_value_set_string(value, priv->physical_port_id);
-        break;
-    case PROP_MASTER:
-        g_value_set_object(value, nm_device_get_master(self));
-        break;
-    case PROP_PARENT:
-        g_value_set_string(value, nm_dbus_track_obj_path_get(&priv->parent_device));
-        break;
-    case PROP_HW_ADDRESS:
-        g_value_set_string(value, priv->hw_addr);
-        break;
-    case PROP_PERM_HW_ADDRESS:
-    {
-        const char *perm_hw_addr;
-        gboolean    perm_hw_addr_is_fake;
-
-        perm_hw_addr = nm_device_get_permanent_hw_address_full(self, FALSE, &perm_hw_addr_is_fake);
-        /* this property is exposed on D-Bus for NMDeviceEthernet and NMDeviceWifi. */
-        g_value_set_string(value, perm_hw_addr && !perm_hw_addr_is_fake ? perm_hw_addr : NULL);
-        break;
-    }
-    case PROP_HAS_PENDING_ACTION:
-        g_value_set_boolean(value, nm_device_has_pending_action(self));
-        break;
-    case PROP_METERED:
-        g_value_set_uint(value, priv->metered);
-        break;
-    case PROP_LLDP_NEIGHBORS:
-        if (priv->lldp_listener)
-            g_value_set_variant(value, nm_lldp_listener_get_neighbors(priv->lldp_listener));
-        else {
-            g_variant_builder_init(&array_builder, G_VARIANT_TYPE("aa{sv}"));
-            g_value_take_variant(value, g_variant_builder_end(&array_builder));
-        }
-        break;
-    case PROP_REAL:
-        g_value_set_boolean(value, nm_device_is_real(self));
-        break;
-    case PROP_SLAVES:
-    {
-        CList *slave_iter;
-        char **slave_list;
-        gsize  i, n;
-
-        n          = c_list_length(&priv->slaves);
-        slave_list = g_new(char *, n + 1);
-        i          = 0;
-        c_list_for_each (slave_iter, &priv->slaves) {
-            SlaveInfo * info = c_list_entry(slave_iter, SlaveInfo, lst_slave);
-            const char *path;
-
-            if (!NM_DEVICE_GET_PRIVATE(info->slave)->is_enslaved)
-                continue;
-            path = nm_dbus_object_get_path(NM_DBUS_OBJECT(info->slave));
-            if (path)
-                slave_list[i++] = g_strdup(path);
-        }
-        nm_assert(i <= n);
-        slave_list[i] = NULL;
-        g_value_take_boxed(value, slave_list);
-        break;
-    }
-    case PROP_STATISTICS_REFRESH_RATE_MS:
-        g_value_set_uint(value, priv->stats.refresh_rate_ms);
-        break;
-    case PROP_STATISTICS_TX_BYTES:
-        g_value_set_uint64(value, priv->stats.tx_bytes);
-        break;
-    case PROP_STATISTICS_RX_BYTES:
-        g_value_set_uint64(value, priv->stats.rx_bytes);
-        break;
-    case PROP_IP4_CONNECTIVITY:
-        g_value_set_uint(value, priv->concheck_x[1].state);
-        break;
-    case PROP_IP6_CONNECTIVITY:
-        g_value_set_uint(value, priv->concheck_x[0].state);
-        break;
-    case PROP_INTERFACE_FLAGS:
-        g_value_set_uint(value, priv->interface_flags);
-        break;
-    default:
-        G_OBJECT_WARN_INVALID_PROPERTY_ID(object, prop_id, pspec);
-        break;
-    }
-}
-
-static void
-set_property(GObject *object, guint prop_id, const GValue *value, GParamSpec *pspec)
-{
-    NMDevice *       self = (NMDevice *) object;
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    switch (prop_id) {
-    case PROP_UDI:
-        /* construct-only */
-        priv->udi = g_value_dup_string(value);
-        break;
-    case PROP_IFACE:
-        /* construct-only */
-        priv->iface_ = g_value_dup_string(value);
-        break;
-    case PROP_DRIVER:
-        /* construct-only */
-        priv->driver = g_value_dup_string(value);
-        break;
-    case PROP_MANAGED:
-        /* via D-Bus */
-        if (nm_device_is_real(self)) {
-            gboolean            managed;
-            NMDeviceStateReason reason;
-
-            managed = g_value_get_boolean(value);
-            if (managed) {
-                reason = NM_DEVICE_STATE_REASON_CONNECTION_ASSUMED;
-                if (NM_IN_SET_TYPED(NMDeviceSysIfaceState,
-                                    priv->sys_iface_state,
-                                    NM_DEVICE_SYS_IFACE_STATE_EXTERNAL,
-                                    NM_DEVICE_SYS_IFACE_STATE_REMOVED))
-                    nm_device_sys_iface_state_set(self, NM_DEVICE_SYS_IFACE_STATE_ASSUME);
-            } else {
-                reason = NM_DEVICE_STATE_REASON_REMOVED;
-                nm_device_sys_iface_state_set(self, NM_DEVICE_SYS_IFACE_STATE_REMOVED);
-            }
-            nm_device_set_unmanaged_by_flags(self, NM_UNMANAGED_USER_EXPLICIT, !managed, reason);
-        }
-        break;
-    case PROP_AUTOCONNECT:
-        /* via D-Bus */
-        if (g_value_get_boolean(value))
-            nm_device_autoconnect_blocked_unset(self, NM_DEVICE_AUTOCONNECT_BLOCKED_ALL);
-        else
-            nm_device_autoconnect_blocked_set(self, NM_DEVICE_AUTOCONNECT_BLOCKED_USER);
-        break;
-    case PROP_NM_PLUGIN_MISSING:
-        /* construct-only */
-        priv->nm_plugin_missing = g_value_get_boolean(value);
-        break;
-    case PROP_DEVICE_TYPE:
-        /* construct-only */
-        nm_assert(priv->type == NM_DEVICE_TYPE_UNKNOWN);
-        priv->type = g_value_get_uint(value);
-        nm_assert(priv->type > NM_DEVICE_TYPE_UNKNOWN);
-        nm_assert(priv->type <= NM_DEVICE_TYPE_VRF);
-        break;
-    case PROP_LINK_TYPE:
-        /* construct-only */
-        nm_assert(priv->link_type == NM_LINK_TYPE_NONE);
-        priv->link_type = g_value_get_uint(value);
-        break;
-    case PROP_TYPE_DESC:
-        /* construct-only */
-        priv->type_desc = g_value_dup_string(value);
-        break;
-    case PROP_RFKILL_TYPE:
-        /* construct-only */
-        priv->rfkill_type = g_value_get_uint(value);
-        break;
-    case PROP_PERM_HW_ADDRESS:
-        /* construct-only */
-        priv->hw_addr_perm = g_value_dup_string(value);
-        break;
-    case PROP_STATISTICS_REFRESH_RATE_MS:
-        /* via D-Bus */
-        _stats_set_refresh_rate(self, g_value_get_uint(value));
-        break;
-    default:
-        G_OBJECT_WARN_INVALID_PROPERTY_ID(object, prop_id, pspec);
-        break;
-    }
-}
-
-/*****************************************************************************/
-
-static void
-nm_device_init(NMDevice *self)
-{
-    NMDevicePrivate *priv;
-
-    priv = G_TYPE_INSTANCE_GET_PRIVATE(self, NM_TYPE_DEVICE, NMDevicePrivate);
-
-    self->_priv = priv;
-
-    c_list_init(&priv->concheck_lst_head);
-    c_list_init(&self->devices_lst);
-    c_list_init(&priv->slaves);
-
-    priv->concheck_x[0].state = NM_CONNECTIVITY_UNKNOWN;
-    priv->concheck_x[1].state = NM_CONNECTIVITY_UNKNOWN;
-
-    nm_dbus_track_obj_path_init(&priv->parent_device, G_OBJECT(self), obj_properties[PROP_PARENT]);
-    nm_dbus_track_obj_path_init(&priv->act_request,
-                                G_OBJECT(self),
-                                obj_properties[PROP_ACTIVE_CONNECTION]);
-
-    priv->netns = g_object_ref(NM_NETNS_GET);
-
-    priv->autoconnect_blocked_flags = DEFAULT_AUTOCONNECT ? NM_DEVICE_AUTOCONNECT_BLOCKED_NONE
-                                                          : NM_DEVICE_AUTOCONNECT_BLOCKED_USER;
-
-    priv->auth_retries          = NM_DEVICE_AUTH_RETRIES_UNSET;
-    priv->type                  = NM_DEVICE_TYPE_UNKNOWN;
-    priv->capabilities          = NM_DEVICE_CAP_NM_SUPPORTED;
-    priv->state                 = NM_DEVICE_STATE_UNMANAGED;
-    priv->state_reason          = NM_DEVICE_STATE_REASON_NONE;
-    priv->rfkill_type           = RFKILL_TYPE_UNKNOWN;
-    priv->unmanaged_flags       = NM_UNMANAGED_PLATFORM_INIT;
-    priv->unmanaged_mask        = priv->unmanaged_flags;
-    priv->available_connections = g_hash_table_new_full(nm_direct_hash, NULL, g_object_unref, NULL);
-    priv->ip6_saved_properties  = g_hash_table_new_full(nm_str_hash, g_str_equal, NULL, g_free);
-    priv->sys_iface_state_      = NM_DEVICE_SYS_IFACE_STATE_EXTERNAL;
-
-    priv->v4_commit_first_time = TRUE;
-    priv->v6_commit_first_time = TRUE;
-}
-
-static GObject *
-constructor(GType type, guint n_construct_params, GObjectConstructParam *construct_params)
-{
-    GObject *             object;
-    GObjectClass *        klass;
-    NMDevice *            self;
-    NMDevicePrivate *     priv;
-    const NMPlatformLink *pllink;
-
-    klass  = G_OBJECT_CLASS(nm_device_parent_class);
-    object = klass->constructor(type, n_construct_params, construct_params);
-    if (!object)
-        return NULL;
-
-    self = NM_DEVICE(object);
-    priv = NM_DEVICE_GET_PRIVATE(self);
-
-    if (priv->iface && G_LIKELY(!nm_utils_get_testing())) {
-        pllink = nm_platform_link_get_by_ifname(nm_device_get_platform(self), priv->iface);
-
-        if (pllink && link_type_compatible(self, pllink->type, NULL, NULL)) {
-            _set_ifindex(self, pllink->ifindex, FALSE);
-            priv->up = NM_FLAGS_HAS(pllink->n_ifi_flags, IFF_UP);
-        }
-    }
-
-    if (priv->hw_addr_perm) {
-        guint8 buf[NM_UTILS_HWADDR_LEN_MAX];
-        gsize  l;
-
-        if (!_nm_utils_hwaddr_aton(priv->hw_addr_perm, buf, sizeof(buf), &l)) {
-            nm_clear_g_free(&priv->hw_addr_perm);
-            g_return_val_if_reached(object);
-        }
-
-        priv->hw_addr_len_ = l;
-        priv->hw_addr      = nm_utils_hwaddr_ntoa(buf, l);
-        _LOGT(LOGD_DEVICE, "hw-addr: has permanent hw-address '%s'", priv->hw_addr_perm);
-    }
-
-    return object;
-}
-
-static void
-constructed(GObject *object)
-{
-    NMDevice *       self = NM_DEVICE(object);
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-    NMPlatform *     platform;
-
-    if (NM_DEVICE_GET_CLASS(self)->get_generic_capabilities)
-        priv->capabilities |= NM_DEVICE_GET_CLASS(self)->get_generic_capabilities(self);
-
-    /* Watch for external IP config changes */
-    platform = nm_device_get_platform(self);
-    g_signal_connect(platform,
-                     NM_PLATFORM_SIGNAL_IP4_ADDRESS_CHANGED,
-                     G_CALLBACK(device_ipx_changed),
-                     self);
-    g_signal_connect(platform,
-                     NM_PLATFORM_SIGNAL_IP6_ADDRESS_CHANGED,
-                     G_CALLBACK(device_ipx_changed),
-                     self);
-    g_signal_connect(platform,
-                     NM_PLATFORM_SIGNAL_IP4_ROUTE_CHANGED,
-                     G_CALLBACK(device_ipx_changed),
-                     self);
-    g_signal_connect(platform,
-                     NM_PLATFORM_SIGNAL_IP6_ROUTE_CHANGED,
-                     G_CALLBACK(device_ipx_changed),
-                     self);
-    g_signal_connect(platform, NM_PLATFORM_SIGNAL_LINK_CHANGED, G_CALLBACK(link_changed_cb), self);
-
-    priv->manager  = g_object_ref(NM_MANAGER_GET);
-    priv->settings = g_object_ref(NM_SETTINGS_GET);
-
-    g_signal_connect(priv->settings,
-                     NM_SETTINGS_SIGNAL_CONNECTION_ADDED,
-                     G_CALLBACK(cp_connection_added),
-                     self);
-    g_signal_connect(priv->settings,
-                     NM_SETTINGS_SIGNAL_CONNECTION_UPDATED,
-                     G_CALLBACK(cp_connection_updated),
-                     self);
-    g_signal_connect(priv->settings,
-                     NM_SETTINGS_SIGNAL_CONNECTION_REMOVED,
-                     G_CALLBACK(cp_connection_removed),
-                     self);
-
-    G_OBJECT_CLASS(nm_device_parent_class)->constructed(object);
-
-    _LOGD(LOGD_DEVICE, "constructed (%s)", G_OBJECT_TYPE_NAME(self));
-}
-
-static void
-dispose(GObject *object)
-{
-    NMDevice *                  self = NM_DEVICE(object);
-    NMDevicePrivate *           priv = NM_DEVICE_GET_PRIVATE(self);
-    NMPlatform *                platform;
-    NMDeviceConnectivityHandle *con_handle;
-    gs_free_error GError *cancelled_error = NULL;
-
-    _LOGD(LOGD_DEVICE, "disposing");
-
-    nm_assert(c_list_is_empty(&self->devices_lst));
-
-    while ((con_handle = c_list_first_entry(&priv->concheck_lst_head,
-                                            NMDeviceConnectivityHandle,
-                                            concheck_lst))) {
-        if (!cancelled_error)
-            nm_utils_error_set_cancelled(&cancelled_error, FALSE, "NMDevice");
-        concheck_handle_complete(con_handle, cancelled_error);
-    }
-
-    nm_clear_g_cancellable(&priv->deactivating_cancellable);
-
-    nm_device_assume_state_reset(self);
-
-    _parent_set_ifindex(self, 0, FALSE);
-
-    platform = nm_device_get_platform(self);
-    g_signal_handlers_disconnect_by_func(platform, G_CALLBACK(device_ipx_changed), self);
-    g_signal_handlers_disconnect_by_func(platform, G_CALLBACK(link_changed_cb), self);
-
-    arp_cleanup(self);
-
-    nm_clear_g_signal_handler(nm_config_get(), &priv->config_changed_id);
-
-    dispatcher_cleanup(self);
-
-    nm_pacrunner_manager_remove_clear(&priv->pacrunner_conf_id);
-
-    _cleanup_generic_pre(self, CLEANUP_TYPE_KEEP);
-
-    nm_assert(c_list_is_empty(&priv->slaves));
-
-    /* Let the kernel manage IPv6LL again */
-    set_nm_ipv6ll(self, FALSE);
-
-    _cleanup_generic_post(self, CLEANUP_TYPE_KEEP);
-
-    nm_assert(priv->master_ready_id == 0);
-
-    g_hash_table_remove_all(priv->ip6_saved_properties);
-
-    nm_clear_g_source(&priv->recheck_assume_id);
-    nm_clear_g_source(&priv->recheck_available.call_id);
-
-    nm_clear_g_source(&priv->check_delete_unrealized_id);
-
-    nm_clear_g_source(&priv->stats.timeout_id);
-
-    carrier_disconnected_action_cancel(self);
-
-    _set_ifindex(self, 0, FALSE);
-    _set_ifindex(self, 0, TRUE);
-
-    if (priv->settings) {
-        g_signal_handlers_disconnect_by_func(priv->settings, cp_connection_added, self);
-        g_signal_handlers_disconnect_by_func(priv->settings, cp_connection_updated, self);
-        g_signal_handlers_disconnect_by_func(priv->settings, cp_connection_removed, self);
-    }
-
-    available_connections_del_all(self);
-
-    if (nm_clear_g_source(&priv->carrier_wait_id))
-        nm_device_remove_pending_action(self, NM_PENDING_ACTION_CARRIER_WAIT, FALSE);
-
-    _clear_queued_act_request(priv, NM_ACTIVE_CONNECTION_STATE_REASON_DEVICE_DISCONNECTED);
-
-    nm_clear_g_source(&priv->device_link_changed_id);
-    nm_clear_g_source(&priv->device_ip_link_changed_id);
-
-    if (priv->lldp_listener) {
-        g_signal_handlers_disconnect_by_func(priv->lldp_listener,
-                                             G_CALLBACK(lldp_neighbors_changed),
-                                             self);
-        nm_lldp_listener_stop(priv->lldp_listener);
-        g_clear_object(&priv->lldp_listener);
-    }
-
-    nm_clear_g_source(&priv->concheck_x[0].p_cur_id);
-    nm_clear_g_source(&priv->concheck_x[1].p_cur_id);
-
-    nm_assert(!priv->sriov.pending);
-    if (priv->sriov.next) {
-        nm_g_slice_free(priv->sriov.next);
-        priv->sriov.next = NULL;
-    }
-
-    G_OBJECT_CLASS(nm_device_parent_class)->dispose(object);
-
-    if (nm_clear_g_source(&priv->queued_state.id)) {
-        /* FIXME: we'd expect the queud_state to be already cleared and this statement
-         * not being necessary. Add this check here to hopefully investigate crash
-         * rh#1270247. */
-        g_return_if_reached();
-    }
-}
-
-static void
-finalize(GObject *object)
-{
-    NMDevice *       self = NM_DEVICE(object);
-    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
-
-    _LOGD(LOGD_DEVICE, "finalize(): %s", G_OBJECT_TYPE_NAME(self));
-
-    g_free(priv->hw_addr);
-    g_free(priv->hw_addr_perm);
-    g_free(priv->hw_addr_initial);
-    g_slist_free(priv->pending_actions);
-    g_slist_free_full(priv->dad6_failed_addrs, (GDestroyNotify) nmp_object_unref);
-    nm_clear_g_free(&priv->physical_port_id);
-    g_free(priv->udi);
-    g_free(priv->path);
-    g_free(priv->iface_);
-    g_free(priv->ip_iface_);
-    g_free(priv->driver);
-    g_free(priv->driver_version);
-    g_free(priv->firmware_version);
-    g_free(priv->type_desc);
-    g_free(priv->dhcp_anycast_address);
-    g_free(priv->current_stable_id);
-
-    g_hash_table_unref(priv->ip6_saved_properties);
-    g_hash_table_unref(priv->available_connections);
-
-    nm_dbus_track_obj_path_deinit(&priv->parent_device);
-    nm_dbus_track_obj_path_deinit(&priv->act_request);
-
-    G_OBJECT_CLASS(nm_device_parent_class)->finalize(object);
-
-    /* for testing, NMDeviceTest does not invoke NMDevice::constructed,
-     * and thus @settings might be unset. */
-    nm_g_object_unref(priv->settings);
-    nm_g_object_unref(priv->manager);
-
-    nm_g_object_unref(priv->concheck_mgr);
-
-    g_object_unref(priv->netns);
-}
-
-/*****************************************************************************/
-
-static const GDBusSignalInfo signal_info_state_changed = NM_DEFINE_GDBUS_SIGNAL_INFO_INIT(
-    "StateChanged",
-    .args = NM_DEFINE_GDBUS_ARG_INFOS(NM_DEFINE_GDBUS_ARG_INFO("new_state", "u"),
-                                      NM_DEFINE_GDBUS_ARG_INFO("old_state", "u"),
-                                      NM_DEFINE_GDBUS_ARG_INFO("reason", "u"), ), );
-
-static const NMDBusInterfaceInfoExtended interface_info_device = {
-    .parent = NM_DEFINE_GDBUS_INTERFACE_INFO_INIT(
-        NM_DBUS_INTERFACE_DEVICE,
-        .methods = NM_DEFINE_GDBUS_METHOD_INFOS(
-            NM_DEFINE_DBUS_METHOD_INFO_EXTENDED(
-                NM_DEFINE_GDBUS_METHOD_INFO_INIT(
-                    "Reapply",
-                    .in_args = NM_DEFINE_GDBUS_ARG_INFOS(
-                        NM_DEFINE_GDBUS_ARG_INFO("connection", "a{sa{sv}}"),
-                        NM_DEFINE_GDBUS_ARG_INFO("version_id", "t"),
-                        NM_DEFINE_GDBUS_ARG_INFO("flags", "u"), ), ),
-                .handle = impl_device_reapply, ),
-            NM_DEFINE_DBUS_METHOD_INFO_EXTENDED(
-                NM_DEFINE_GDBUS_METHOD_INFO_INIT(
-                    "GetAppliedConnection",
-                    .in_args  = NM_DEFINE_GDBUS_ARG_INFOS(NM_DEFINE_GDBUS_ARG_INFO("flags", "u"), ),
-                    .out_args = NM_DEFINE_GDBUS_ARG_INFOS(
-                        NM_DEFINE_GDBUS_ARG_INFO("connection", "a{sa{sv}}"),
-                        NM_DEFINE_GDBUS_ARG_INFO("version_id", "t"), ), ),
-                .handle = impl_device_get_applied_connection, ),
-            NM_DEFINE_DBUS_METHOD_INFO_EXTENDED(NM_DEFINE_GDBUS_METHOD_INFO_INIT("Disconnect", ),
-                                                .handle = impl_device_disconnect, ),
-            NM_DEFINE_DBUS_METHOD_INFO_EXTENDED(NM_DEFINE_GDBUS_METHOD_INFO_INIT("Delete", ),
-                                                .handle = impl_device_delete, ), ),
-        .signals    = NM_DEFINE_GDBUS_SIGNAL_INFOS(&signal_info_state_changed, ),
-        .properties = NM_DEFINE_GDBUS_PROPERTY_INFOS(
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("Udi", "s", NM_DEVICE_UDI),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("Path", "s", NM_DEVICE_PATH),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("Interface", "s", NM_DEVICE_IFACE),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("IpInterface",
-                                                             "s",
-                                                             NM_DEVICE_IP_IFACE),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("Driver", "s", NM_DEVICE_DRIVER),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("DriverVersion",
-                                                             "s",
-                                                             NM_DEVICE_DRIVER_VERSION),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("FirmwareVersion",
-                                                             "s",
-                                                             NM_DEVICE_FIRMWARE_VERSION),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("Capabilities",
-                                                             "u",
-                                                             NM_DEVICE_CAPABILITIES),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("Ip4Address",
-                                                             "u",
-                                                             NM_DEVICE_IP4_ADDRESS),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("State", "u", NM_DEVICE_STATE),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("StateReason",
-                                                             "(uu)",
-                                                             NM_DEVICE_STATE_REASON),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("ActiveConnection",
-                                                             "o",
-                                                             NM_DEVICE_ACTIVE_CONNECTION),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("Ip4Config",
-                                                             "o",
-                                                             NM_DEVICE_IP4_CONFIG),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("Dhcp4Config",
-                                                             "o",
-                                                             NM_DEVICE_DHCP4_CONFIG),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("Ip6Config",
-                                                             "o",
-                                                             NM_DEVICE_IP6_CONFIG),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("Dhcp6Config",
-                                                             "o",
-                                                             NM_DEVICE_DHCP6_CONFIG),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READWRITABLE_L("Managed",
-                                                                 "b",
-                                                                 NM_DEVICE_MANAGED,
-                                                                 NM_AUTH_PERMISSION_NETWORK_CONTROL,
-                                                                 NM_AUDIT_OP_DEVICE_MANAGED),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READWRITABLE_L("Autoconnect",
-                                                                 "b",
-                                                                 NM_DEVICE_AUTOCONNECT,
-                                                                 NM_AUTH_PERMISSION_NETWORK_CONTROL,
-                                                                 NM_AUDIT_OP_DEVICE_AUTOCONNECT),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("FirmwareMissing",
-                                                             "b",
-                                                             NM_DEVICE_FIRMWARE_MISSING),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("NmPluginMissing",
-                                                             "b",
-                                                             NM_DEVICE_NM_PLUGIN_MISSING),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("DeviceType",
-                                                             "u",
-                                                             NM_DEVICE_DEVICE_TYPE),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("AvailableConnections",
-                                                             "ao",
-                                                             NM_DEVICE_AVAILABLE_CONNECTIONS),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("PhysicalPortId",
-                                                             "s",
-                                                             NM_DEVICE_PHYSICAL_PORT_ID),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("Mtu", "u", NM_DEVICE_MTU),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("Metered", "u", NM_DEVICE_METERED),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("LldpNeighbors",
-                                                             "aa{sv}",
-                                                             NM_DEVICE_LLDP_NEIGHBORS),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE_L("Real", "b", NM_DEVICE_REAL),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE("Ip4Connectivity",
-                                                           "u",
-                                                           NM_DEVICE_IP4_CONNECTIVITY),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE("Ip6Connectivity",
-                                                           "u",
-                                                           NM_DEVICE_IP6_CONNECTIVITY),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE("InterfaceFlags",
-                                                           "u",
-                                                           NM_DEVICE_INTERFACE_FLAGS),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE("HwAddress",
-                                                           "s",
-                                                           NM_DEVICE_HW_ADDRESS), ), ),
-};
-
-const NMDBusInterfaceInfoExtended nm_interface_info_device_statistics = {
-    .parent = NM_DEFINE_GDBUS_INTERFACE_INFO_INIT(
-        NM_DBUS_INTERFACE_DEVICE_STATISTICS,
-        .signals    = NM_DEFINE_GDBUS_SIGNAL_INFOS(&nm_signal_info_property_changed_legacy, ),
-        .properties = NM_DEFINE_GDBUS_PROPERTY_INFOS(
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READWRITABLE(
-                "RefreshRateMs",
-                "u",
-                NM_DEVICE_STATISTICS_REFRESH_RATE_MS,
-                NM_AUTH_PERMISSION_ENABLE_DISABLE_STATISTICS,
-                NM_AUDIT_OP_STATISTICS),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE("TxBytes",
-                                                           "t",
-                                                           NM_DEVICE_STATISTICS_TX_BYTES),
-            NM_DEFINE_DBUS_PROPERTY_INFO_EXTENDED_READABLE("RxBytes",
-                                                           "t",
-                                                           NM_DEVICE_STATISTICS_RX_BYTES), ), ),
-};
-
-static void
-nm_device_class_init(NMDeviceClass *klass)
-{
-    GObjectClass *     object_class      = G_OBJECT_CLASS(klass);
-    NMDBusObjectClass *dbus_object_class = NM_DBUS_OBJECT_CLASS(klass);
-
-    g_type_class_add_private(object_class, sizeof(NMDevicePrivate));
-
-    dbus_object_class->export_path = NM_DBUS_EXPORT_PATH_NUMBERED(NM_DBUS_PATH "/Devices");
-    dbus_object_class->interface_infos =
-        NM_DBUS_INTERFACE_INFOS(&interface_info_device, &nm_interface_info_device_statistics);
-
-    object_class->dispose      = dispose;
-    object_class->finalize     = finalize;
-    object_class->set_property = set_property;
-    object_class->get_property = get_property;
-    object_class->constructor  = constructor;
-    object_class->constructed  = constructed;
-
-    klass->link_changed = link_changed;
-
-    klass->is_available                 = is_available;
-    klass->act_stage2_config            = act_stage2_config;
-    klass->act_stage3_ip_config_start   = act_stage3_ip_config_start;
-    klass->act_stage4_ip_config_timeout = act_stage4_ip_config_timeout;
-
-    klass->get_type_description          = get_type_description;
-    klass->can_auto_connect              = can_auto_connect;
-    klass->can_update_from_platform_link = can_update_from_platform_link;
-    klass->check_connection_compatible   = check_connection_compatible;
-    klass->check_connection_available    = check_connection_available;
-    klass->can_unmanaged_external_down   = can_unmanaged_external_down;
-    klass->realize_start_notify          = realize_start_notify;
-    klass->unrealize_notify              = unrealize_notify;
-    klass->carrier_changed_notify        = carrier_changed_notify;
-    klass->get_ip_iface_identifier       = get_ip_iface_identifier;
-    klass->unmanaged_on_quit             = unmanaged_on_quit;
-    klass->deactivate_reset_hw_addr      = deactivate_reset_hw_addr;
-    klass->parent_changed_notify         = parent_changed_notify;
-    klass->can_reapply_change            = can_reapply_change;
-    klass->reapply_connection            = reapply_connection;
-    klass->set_platform_mtu              = set_platform_mtu;
-
-    obj_properties[PROP_UDI] =
-        g_param_spec_string(NM_DEVICE_UDI,
-                            "",
-                            "",
-                            NULL,
-                            G_PARAM_READWRITE | G_PARAM_CONSTRUCT_ONLY | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_PATH] = g_param_spec_string(NM_DEVICE_PATH,
-                                                    "",
-                                                    "",
-                                                    NULL,
-                                                    G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_IFACE] =
-        g_param_spec_string(NM_DEVICE_IFACE,
-                            "",
-                            "",
-                            NULL,
-                            G_PARAM_READWRITE | G_PARAM_CONSTRUCT_ONLY | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_IP_IFACE] = g_param_spec_string(NM_DEVICE_IP_IFACE,
-                                                        "",
-                                                        "",
-                                                        NULL,
-                                                        G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_DRIVER] =
-        g_param_spec_string(NM_DEVICE_DRIVER,
-                            "",
-                            "",
-                            NULL,
-                            G_PARAM_READWRITE | G_PARAM_CONSTRUCT_ONLY | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_DRIVER_VERSION] =
-        g_param_spec_string(NM_DEVICE_DRIVER_VERSION,
-                            "",
-                            "",
-                            NULL,
-                            G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_FIRMWARE_VERSION] =
-        g_param_spec_string(NM_DEVICE_FIRMWARE_VERSION,
-                            "",
-                            "",
-                            NULL,
-                            G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_CAPABILITIES] =
-        g_param_spec_uint(NM_DEVICE_CAPABILITIES,
-                          "",
-                          "",
-                          0,
-                          G_MAXUINT32,
-                          NM_DEVICE_CAP_NONE,
-                          G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_CARRIER] = g_param_spec_boolean(NM_DEVICE_CARRIER,
-                                                        "",
-                                                        "",
-                                                        FALSE,
-                                                        G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_MTU]     = g_param_spec_uint(NM_DEVICE_MTU,
-                                                 "",
-                                                 "",
-                                                 0,
-                                                 G_MAXUINT32,
-                                                 1500,
-                                                 G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_IP4_ADDRESS] =
-        g_param_spec_variant(NM_DEVICE_IP4_ADDRESS,
-                             "",
-                             "",
-                             G_VARIANT_TYPE_UINT32,
-                             NULL,
-                             G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_IP4_CONFIG] =
-        g_param_spec_string(NM_DEVICE_IP4_CONFIG,
-                            "",
-                            "",
-                            NULL,
-                            G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_DHCP4_CONFIG] =
-        g_param_spec_string(NM_DEVICE_DHCP4_CONFIG,
-                            "",
-                            "",
-                            NULL,
-                            G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_IP6_CONFIG] =
-        g_param_spec_string(NM_DEVICE_IP6_CONFIG,
-                            "",
-                            "",
-                            NULL,
-                            G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_DHCP6_CONFIG] =
-        g_param_spec_string(NM_DEVICE_DHCP6_CONFIG,
-                            "",
-                            "",
-                            NULL,
-                            G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_STATE] = g_param_spec_uint(NM_DEVICE_STATE,
-                                                   "",
-                                                   "",
-                                                   0,
-                                                   G_MAXUINT32,
-                                                   NM_DEVICE_STATE_UNKNOWN,
-                                                   G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_STATE_REASON] =
-        g_param_spec_variant(NM_DEVICE_STATE_REASON,
-                             "",
-                             "",
-                             G_VARIANT_TYPE("(uu)"),
-                             NULL,
-                             G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_ACTIVE_CONNECTION] =
-        g_param_spec_string(NM_DEVICE_ACTIVE_CONNECTION,
-                            "",
-                            "",
-                            NULL,
-                            G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_DEVICE_TYPE] =
-        g_param_spec_uint(NM_DEVICE_DEVICE_TYPE,
-                          "",
-                          "",
-                          0,
-                          G_MAXUINT32,
-                          NM_DEVICE_TYPE_UNKNOWN,
-                          G_PARAM_READWRITE | G_PARAM_CONSTRUCT_ONLY | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_LINK_TYPE] =
-        g_param_spec_uint(NM_DEVICE_LINK_TYPE,
-                          "",
-                          "",
-                          0,
-                          G_MAXUINT32,
-                          NM_LINK_TYPE_NONE,
-                          G_PARAM_READWRITE | G_PARAM_CONSTRUCT_ONLY | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_MANAGED]     = g_param_spec_boolean(NM_DEVICE_MANAGED,
-                                                        "",
-                                                        "",
-                                                        FALSE,
-                                                        G_PARAM_READWRITE | /* via D-Bus */
-                                                            G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_AUTOCONNECT] = g_param_spec_boolean(NM_DEVICE_AUTOCONNECT,
-                                                            "",
-                                                            "",
-                                                            DEFAULT_AUTOCONNECT,
-                                                            G_PARAM_READWRITE | /* via D-Bus */
-                                                                G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_FIRMWARE_MISSING] =
-        g_param_spec_boolean(NM_DEVICE_FIRMWARE_MISSING,
-                             "",
-                             "",
-                             FALSE,
-                             G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_NM_PLUGIN_MISSING] =
-        g_param_spec_boolean(NM_DEVICE_NM_PLUGIN_MISSING,
-                             "",
-                             "",
-                             FALSE,
-                             G_PARAM_READWRITE | G_PARAM_CONSTRUCT_ONLY | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_TYPE_DESC] =
-        g_param_spec_string(NM_DEVICE_TYPE_DESC,
-                            "",
-                            "",
-                            NULL,
-                            G_PARAM_READWRITE | G_PARAM_CONSTRUCT_ONLY | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_RFKILL_TYPE] =
-        g_param_spec_uint(NM_DEVICE_RFKILL_TYPE,
-                          "",
-                          "",
-                          RFKILL_TYPE_WLAN,
-                          RFKILL_TYPE_MAX,
-                          RFKILL_TYPE_UNKNOWN,
-                          G_PARAM_READWRITE | G_PARAM_CONSTRUCT_ONLY | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_IFINDEX] = g_param_spec_int(NM_DEVICE_IFINDEX,
-                                                    "",
-                                                    "",
-                                                    0,
-                                                    G_MAXINT,
-                                                    0,
-                                                    G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_AVAILABLE_CONNECTIONS] =
-        g_param_spec_boxed(NM_DEVICE_AVAILABLE_CONNECTIONS,
-                           "",
-                           "",
-                           G_TYPE_STRV,
-                           G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_PHYSICAL_PORT_ID] =
-        g_param_spec_string(NM_DEVICE_PHYSICAL_PORT_ID,
-                            "",
-                            "",
-                            NULL,
-                            G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_MASTER] = g_param_spec_object(NM_DEVICE_MASTER,
-                                                      "",
-                                                      "",
-                                                      NM_TYPE_DEVICE,
-                                                      G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_PARENT] = g_param_spec_string(NM_DEVICE_PARENT,
-                                                      "",
-                                                      "",
-                                                      NULL,
-                                                      G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_HW_ADDRESS] =
-        g_param_spec_string(NM_DEVICE_HW_ADDRESS,
-                            "",
-                            "",
-                            NULL,
-                            G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_PERM_HW_ADDRESS] =
-        g_param_spec_string(NM_DEVICE_PERM_HW_ADDRESS,
-                            "",
-                            "",
-                            NULL,
-                            G_PARAM_READWRITE | G_PARAM_CONSTRUCT_ONLY | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_HAS_PENDING_ACTION] =
-        g_param_spec_boolean(NM_DEVICE_HAS_PENDING_ACTION,
-                             "",
-                             "",
-                             FALSE,
-                             G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_METERED] = g_param_spec_uint(NM_DEVICE_METERED,
-                                                     "",
-                                                     "",
-                                                     0,
-                                                     G_MAXUINT32,
-                                                     NM_METERED_UNKNOWN,
-                                                     G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_LLDP_NEIGHBORS] =
-        g_param_spec_variant(NM_DEVICE_LLDP_NEIGHBORS,
-                             "",
-                             "",
-                             G_VARIANT_TYPE("aa{sv}"),
-                             NULL,
-                             G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_REAL]   = g_param_spec_boolean(NM_DEVICE_REAL,
-                                                     "",
-                                                     "",
-                                                     FALSE,
-                                                     G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_SLAVES] = g_param_spec_boxed(NM_DEVICE_SLAVES,
-                                                     "",
-                                                     "",
-                                                     G_TYPE_STRV,
-                                                     G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-
-    obj_properties[PROP_STATISTICS_REFRESH_RATE_MS] =
-        g_param_spec_uint(NM_DEVICE_STATISTICS_REFRESH_RATE_MS,
-                          "",
-                          "",
-                          0,
-                          UINT32_MAX,
-                          0,
-                          G_PARAM_READWRITE | /* via D-Bus */
-                              G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_STATISTICS_TX_BYTES] =
-        g_param_spec_uint64(NM_DEVICE_STATISTICS_TX_BYTES,
-                            "",
-                            "",
-                            0,
-                            UINT64_MAX,
-                            0,
-                            G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_STATISTICS_RX_BYTES] =
-        g_param_spec_uint64(NM_DEVICE_STATISTICS_RX_BYTES,
-                            "",
-                            "",
-                            0,
-                            UINT64_MAX,
-                            0,
-                            G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-
-    obj_properties[PROP_IP4_CONNECTIVITY] =
-        g_param_spec_uint(NM_DEVICE_IP4_CONNECTIVITY,
-                          "",
-                          "",
-                          NM_CONNECTIVITY_UNKNOWN,
-                          NM_CONNECTIVITY_FULL,
-                          NM_CONNECTIVITY_UNKNOWN,
-                          G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_IP6_CONNECTIVITY] =
-        g_param_spec_uint(NM_DEVICE_IP6_CONNECTIVITY,
-                          "",
-                          "",
-                          NM_CONNECTIVITY_UNKNOWN,
-                          NM_CONNECTIVITY_FULL,
-                          NM_CONNECTIVITY_UNKNOWN,
-                          G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-    obj_properties[PROP_INTERFACE_FLAGS] =
-        g_param_spec_uint(NM_DEVICE_INTERFACE_FLAGS,
-                          "",
-                          "",
-                          0,
-                          G_MAXUINT32,
-                          0,
-                          G_PARAM_READABLE | G_PARAM_STATIC_STRINGS);
-
-    g_object_class_install_properties(object_class, _PROPERTY_ENUMS_LAST, obj_properties);
-
-    signals[STATE_CHANGED] = g_signal_new(NM_DEVICE_STATE_CHANGED,
-                                          G_OBJECT_CLASS_TYPE(object_class),
-                                          G_SIGNAL_RUN_LAST,
-                                          G_STRUCT_OFFSET(NMDeviceClass, state_changed),
-                                          NULL,
-                                          NULL,
-                                          NULL,
-                                          G_TYPE_NONE,
-                                          3,
-                                          G_TYPE_UINT,
-                                          G_TYPE_UINT,
-                                          G_TYPE_UINT);
-
-    signals[AUTOCONNECT_ALLOWED] = g_signal_new(NM_DEVICE_AUTOCONNECT_ALLOWED,
-                                                G_OBJECT_CLASS_TYPE(object_class),
-                                                G_SIGNAL_RUN_LAST,
-                                                0,
-                                                autoconnect_allowed_accumulator,
-                                                NULL,
-                                                NULL,
-                                                G_TYPE_BOOLEAN,
-                                                0);
-
-    signals[IP4_CONFIG_CHANGED] = g_signal_new(NM_DEVICE_IP4_CONFIG_CHANGED,
-                                               G_OBJECT_CLASS_TYPE(object_class),
-                                               G_SIGNAL_RUN_FIRST,
-                                               0,
-                                               NULL,
-                                               NULL,
-                                               NULL,
-                                               G_TYPE_NONE,
-                                               2,
-                                               G_TYPE_OBJECT,
-                                               G_TYPE_OBJECT);
-
-    signals[IP6_CONFIG_CHANGED] = g_signal_new(NM_DEVICE_IP6_CONFIG_CHANGED,
-                                               G_OBJECT_CLASS_TYPE(object_class),
-                                               G_SIGNAL_RUN_FIRST,
-                                               0,
-                                               NULL,
-                                               NULL,
-                                               NULL,
-                                               G_TYPE_NONE,
-                                               2,
-                                               G_TYPE_OBJECT,
-                                               G_TYPE_OBJECT);
-
-    signals[IP6_PREFIX_DELEGATED] = g_signal_new(NM_DEVICE_IP6_PREFIX_DELEGATED,
-                                                 G_OBJECT_CLASS_TYPE(object_class),
-                                                 G_SIGNAL_RUN_FIRST,
-                                                 0,
-                                                 NULL,
-                                                 NULL,
-                                                 NULL,
-                                                 G_TYPE_NONE,
-                                                 1,
-                                                 G_TYPE_POINTER);
-
-    signals[IP6_SUBNET_NEEDED] = g_signal_new(NM_DEVICE_IP6_SUBNET_NEEDED,
-                                              G_OBJECT_CLASS_TYPE(object_class),
-                                              G_SIGNAL_RUN_FIRST,
-                                              0,
-                                              NULL,
-                                              NULL,
-                                              NULL,
-                                              G_TYPE_NONE,
-                                              0);
-
-    signals[REMOVED] = g_signal_new(NM_DEVICE_REMOVED,
-                                    G_OBJECT_CLASS_TYPE(object_class),
-                                    G_SIGNAL_RUN_FIRST,
-                                    0,
-                                    NULL,
-                                    NULL,
-                                    NULL,
-                                    G_TYPE_NONE,
-                                    0);
-
-    signals[RECHECK_AUTO_ACTIVATE] = g_signal_new(NM_DEVICE_RECHECK_AUTO_ACTIVATE,
-                                                  G_OBJECT_CLASS_TYPE(object_class),
-                                                  G_SIGNAL_RUN_FIRST,
-                                                  0,
-                                                  NULL,
-                                                  NULL,
-                                                  NULL,
-                                                  G_TYPE_NONE,
-                                                  0);
-
-    signals[RECHECK_ASSUME] = g_signal_new(NM_DEVICE_RECHECK_ASSUME,
-                                           G_OBJECT_CLASS_TYPE(object_class),
-                                           G_SIGNAL_RUN_FIRST,
-                                           0,
-                                           NULL,
-                                           NULL,
-                                           NULL,
-                                           G_TYPE_NONE,
-                                           0);
-}
-
-/* Connection defaults from plugins */
-NM_CON_DEFAULT_NOP("cdma.mtu");
-NM_CON_DEFAULT_NOP("gsm.mtu");
-NM_CON_DEFAULT_NOP("wifi.ap-isolation");
-NM_CON_DEFAULT_NOP("wifi.powersave");
-NM_CON_DEFAULT_NOP("wifi.wake-on-wlan");
-NM_CON_DEFAULT_NOP("wifi-sec.pmf");
-NM_CON_DEFAULT_NOP("wifi-sec.fils");