vif-route-qubes can be called simultaneously, for example in case of: - multiple domains startup - HVM startup (two interfaces: one to the target domain, second one to stubdom) If that happens, one of calls can fail because of iptables lock.