ip/iplink.c - main - githubmirror/iproute2

ip/iplink.c
1 858 строк48 KB
Fernando Fernandez Mancera
iplink: set NLA_F_NESTED for IPv4 devconf attributes
07 июн 2026, 16:45
07 июн 2026, 16:457340b53
/* SPDX-License-Identifier: GPL-2.0-or-later */
/*
 * iplink.c		"ip link".
 *
 * Authors:	Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
 */

#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <fcntl.h>
#include <dlfcn.h>
#include <errno.h>
#include <string.h>
#include <strings.h>
#include <limits.h>

#include <sys/socket.h>
#include <arpa/inet.h>
#include <linux/if.h>
#include <linux/if_ether.h>
#include <linux/ip.h>

#include "rt_names.h"
#include "utils.h"
#include "ip_common.h"
#include "namespace.h"

#ifndef GSO_MAX_SEGS
#define GSO_MAX_SEGS		65535
#endif


static void usage(void) __attribute__((noreturn));

void iplink_types_usage(void)
{
	/* Remember to add new entry here if new type is added. */
	fprintf(stderr,
		"TYPE := { amt | bareudp | bond | bond_slave | bridge | bridge_slave |\n"
		"          dsa | dummy | erspan | geneve | gre | gretap | gtp | hsr |\n"
		"          ifb | ip6erspan | ip6gre | ip6gretap | ip6tnl |\n"
		"          ipip | ipoib | ipvlan | ipvtap |\n"
		"          macsec | macvlan | macvtap | netdevsim |\n"
		"          netkit | nlmon | pfcp | rmnet | sit | team | team_slave |\n"
		"          vcan | veth | vlan | vrf | vti | vxcan | vxlan | wwan |\n"
		"          xfrm | virt_wifi }\n");
}

void iplink_usage(void)
{
	fprintf(stderr,
		"Usage: ip link add [link DEV | parentdev NAME] [ name ] NAME\n"
		"		    [ txqueuelen PACKETS ]\n"
		"		    [ address LLADDR ]\n"
		"		    [ broadcast LLADDR ]\n"
		"		    [ mtu MTU ] [index IDX ]\n"
		"		    [ numtxqueues QUEUE_COUNT ]\n"
		"		    [ numrxqueues QUEUE_COUNT ]\n"
		"		    [ netns { PID | NETNSNAME | NETNSFILE } ]\n"
		"		    type TYPE [ ARGS ]\n"
		"\n"
		"	ip link delete { DEVICE | dev DEVICE | group DEVGROUP } type TYPE [ ARGS ]\n"
		"\n"
		"	ip link { set | change } { DEVICE | dev DEVICE | group DEVGROUP }\n"
		"			[ { up | down } ]\n"
		"			[ type TYPE ARGS ]\n");

	fprintf(stderr,
		"		[ arp { on | off } ]\n"
		"		[ dynamic { on | off } ]\n"
		"		[ multicast { on | off } ]\n"
		"		[ allmulticast { on | off } ]\n"
		"		[ promisc { on | off } ]\n"
		"		[ trailers { on | off } ]\n"
		"		[ carrier { on | off } ]\n"
		"		[ txqueuelen PACKETS ]\n"
		"		[ name NEWNAME ]\n"
		"		[ address LLADDR ]\n"
		"		[ broadcast LLADDR ]\n"
		"		[ mtu MTU ]\n"
		"		[ netns { PID | NETNSNAME | NETNSFILE } ]\n"
		"		[ link-netns NAME | link-netnsid ID ]\n"
		"		[ alias NAME ]\n"
		"		[ vf NUM [ mac LLADDR ]\n"
		"			 [ vlan VLANID [ qos VLAN-QOS ] [ proto VLAN-PROTO ] ]\n"
		"			 [ rate TXRATE ]\n"
		"			 [ max_tx_rate TXRATE ]\n"
		"			 [ min_tx_rate TXRATE ]\n"
		"			 [ spoofchk { on | off} ]\n"
		"			 [ query_rss { on | off} ]\n"
		"			 [ state { auto | enable | disable} ]\n"
		"			 [ trust { on | off} ]\n"
		"			 [ node_guid EUI64 ]\n"
		"			 [ port_guid EUI64 ] ]\n"
		"		[ { xdp | xdpgeneric | xdpdrv | xdpoffload } { off |\n"
#ifdef HAVE_LIBBPF
		"			  object FILE [ { section | program } NAME ] [ verbose ] |\n"
#else
		"			  object FILE [ section NAME ] [ verbose ] |\n"
#endif
		"			  pinned FILE } ]\n"
		"		[ master DEVICE ][ vrf NAME ]\n"
		"		[ nomaster ]\n"
		"		[ addrgenmode { eui64 | none | stable_secret | random } ]\n"
		"		[ inet [ { forwarding | proxy_arp | accept_redirects |\n"
		"			   secure_redirects | send_redirects | shared_media |\n"
		"			   accept_source_route | bootp_relay | log_martians |\n"
		"			   arp_filter | disable_xfrm | disable_policy |\n"
		"			   promote_secondaries | arp_notify | accept_local |\n"
		"			   src_vmark | proxy_arp_pvlan | route_localnet |\n"
		"			   bc_forwarding | ignore_routes_with_linkdown |\n"
		"			   drop_unicast_in_l2_multicast |\n"
		"			   drop_gratuitous_arp | arp_evict_nocarrier } { on | off } ]\n"
		"		       [ rp_filter { 0 | 1 | 2 } ]\n"
		"		       [ arp_announce { 0 | 1 | 2 } ]\n"
		"		       [ arp_ignore { 0 | 1 | ... | 8 } ]\n"
		"		       [ arp_accept { 0 | 1 | 2 } ]\n"
		"		       [ force_igmp_version { 0 | 1 | 2 | 3 } ]\n"
		"		       [ tag TAG ] [ medium_id ID ]\n"
		"		       [ igmpv2_unsolicited_report_interval INTERVAL ]\n"
		"		       [ igmpv3_unsolicited_report_interval INTERVAL ] ]\n"
		"		[ protodown { on | off } ]\n"
		"		[ protodown_reason PREASON { on | off } ]\n"
		"		[ gso_max_size BYTES ] [ gso_ipv4_max_size BYTES ] [ gso_max_segs PACKETS ]\n"
		"		[ gro_max_size BYTES ] [ gro_ipv4_max_size BYTES ]\n"
		"\n"
		"	ip link show [ DEVICE | group GROUP ] [ { up | down } ] [master DEV] [vrf NAME]\n"
		"		[type TYPE] [nomaster] [ novf ]\n"
		"\n"
		"	ip link xstats type TYPE [ ARGS ]\n"
		"\n"
		"	ip link afstats [ dev DEVICE ]\n"
		"	ip link property add dev DEVICE [ altname NAME .. ]\n"
		"	ip link property del dev DEVICE [ altname NAME .. ]\n");

	fprintf(stderr,
		"\n"
		"	ip link help [ TYPE ]\n"
		"\n");
	iplink_types_usage();

	exit(-1);
}

static void usage(void)
{
	iplink_usage();
}

static int on_off(const char *msg, const char *realval)
{
	fprintf(stderr,
		"Error: argument of \"%s\" must be \"on\" or \"off\", not \"%s\"\n",
		msg, realval);
	return -1;
}

static void *BODY;		/* cached dlopen(NULL) handle */
static struct link_util *linkutil_list;

struct link_util *get_link_kind(const char *id)
{
	void *dlh;
	char buf[256];
	struct link_util *l;

	for (l = linkutil_list; l; l = l->next)
		if (strcmp(l->id, id) == 0)
			return l;

	snprintf(buf, sizeof(buf), "%s/link_%s.so", get_ip_lib_dir(), id);
	dlh = dlopen(buf, RTLD_LAZY);
	if (dlh == NULL) {
		/* look in current binary, only open once */
		dlh = BODY;
		if (dlh == NULL) {
			dlh = BODY = dlopen(NULL, RTLD_LAZY);
			if (dlh == NULL)
				return NULL;
		}
	}

	snprintf(buf, sizeof(buf), "%s_link_util", id);
	l = dlsym(dlh, buf);
	if (l == NULL)
		return NULL;

	l->next = linkutil_list;
	linkutil_list = l;
	return l;
}

static int get_link_mode(const char *mode)
{
	if (strcasecmp(mode, "default") == 0)
		return IF_LINK_MODE_DEFAULT;
	if (strcasecmp(mode, "dormant") == 0)
		return IF_LINK_MODE_DORMANT;
	return -1;
}

static int get_addr_gen_mode(const char *mode)
{
	if (strcasecmp(mode, "eui64") == 0)
		return IN6_ADDR_GEN_MODE_EUI64;
	if (strcasecmp(mode, "none") == 0)
		return IN6_ADDR_GEN_MODE_NONE;
	if (strcasecmp(mode, "stable_secret") == 0)
		return IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
	if (strcasecmp(mode, "random") == 0)
		return IN6_ADDR_GEN_MODE_RANDOM;
	return -1;
}

static int nl_get_ll_addr_len(const char *ifname)
{
	int len;
	int dev_index = ll_name_to_index(ifname);
	struct iplink_req req = {
		.n = {
			.nlmsg_len = NLMSG_LENGTH(sizeof(struct ifinfomsg)),
			.nlmsg_type = RTM_GETLINK,
			.nlmsg_flags = NLM_F_REQUEST
		},
		.i = {
			.ifi_family = preferred_family,
			.ifi_index = dev_index,
		}
	};
	struct nlmsghdr *answer;
	struct rtattr *tb[IFLA_MAX+1];

	if (dev_index == 0)
		return -1;

	if (rtnl_talk(&rth, &req.n, &answer) < 0)
		return -1;

	len = answer->nlmsg_len - NLMSG_LENGTH(sizeof(struct ifinfomsg));
	if (len < 0) {
		free(answer);
		return -1;
	}

	parse_rtattr_flags(tb, IFLA_MAX, IFLA_RTA(NLMSG_DATA(answer)),
			   len, NLA_F_NESTED);
	if (!tb[IFLA_ADDRESS]) {
		free(answer);
		return -1;
	}

	len = RTA_PAYLOAD(tb[IFLA_ADDRESS]);
	free(answer);
	return len;
}

static int get_ifindex_in_netns(struct rtnl_handle *rtnl, int netnsid,
				const char *ifname)
{
	struct {
		struct nlmsghdr		n;
		struct ifinfomsg	ifm;
		char			buf[1024];
	} req = {
		.n.nlmsg_len = NLMSG_LENGTH(sizeof(struct ifinfomsg)),
		.n.nlmsg_flags = NLM_F_REQUEST,
		.n.nlmsg_type = RTM_GETLINK,
	};
	struct nlmsghdr *answer;
	int ifindex;

	addattr32(&req.n, sizeof(req), IFLA_TARGET_NETNSID, netnsid);
	addattr_l(&req.n, sizeof(req),
		  !check_ifname(ifname) ? IFLA_IFNAME : IFLA_ALT_IFNAME,
		  ifname, strlen(ifname) + 1);

	if (rtnl_talk(rtnl, &req.n, &answer) < 0)
		return 0;

	if (answer->nlmsg_len < NLMSG_LENGTH(sizeof(struct ifinfomsg))) {
		free(answer);
		return 0;
	}
	ifindex = ((struct ifinfomsg *)NLMSG_DATA(answer))->ifi_index;
	free(answer);
	return ifindex;
}

static void iplink_parse_vf_vlan_info(int vf, int *argcp, char ***argvp,
				      struct ifla_vf_vlan_info *ivvip)
{
	int argc = *argcp;
	char **argv = *argvp;
	unsigned int vci;

	NEXT_ARG();
	if (get_unsigned(&vci, *argv, 0) || vci > 4095)
		invarg("Invalid \"vlan\" value\n", *argv);

	ivvip->vlan = vci;
	ivvip->vf = vf;
	ivvip->qos = 0;
	ivvip->vlan_proto = htons(ETH_P_8021Q);
	if (NEXT_ARG_OK()) {
		NEXT_ARG();
		if (matches(*argv, "qos") == 0) {
			NEXT_ARG();
			if (get_unsigned(&ivvip->qos, *argv, 0))
				invarg("Invalid \"qos\" value\n", *argv);
		} else {
			/* rewind arg */
			PREV_ARG();
		}
	}
	if (NEXT_ARG_OK()) {
		NEXT_ARG();
		if (matches(*argv, "proto") == 0) {
			NEXT_ARG();
			if (ll_proto_a2n(&ivvip->vlan_proto, *argv))
				invarg("protocol is invalid\n", *argv);
			if (ivvip->vlan_proto != htons(ETH_P_8021AD) &&
			    ivvip->vlan_proto != htons(ETH_P_8021Q)) {
				SPRINT_BUF(b1);
				SPRINT_BUF(b2);
				char msg[64 + sizeof(b1) + sizeof(b2)];

				sprintf(msg,
					"Invalid \"vlan protocol\" value - supported %s, %s\n",
					ll_proto_n2a(htons(ETH_P_8021Q),
					     b1, sizeof(b1)),
					ll_proto_n2a(htons(ETH_P_8021AD),
					     b2, sizeof(b2)));
				invarg(msg, *argv);
			}
		} else {
			/* rewind arg */
			PREV_ARG();
		}
	}

	*argcp = argc;
	*argvp = argv;
}

static int iplink_parse_vf(int vf, int *argcp, char ***argvp,
			   struct iplink_req *req, const char *dev)
{
	char new_rate_api = 0, count = 0, override_legacy_rate = 0;
	struct ifla_vf_rate tivt;
	int len, argc = *argcp;
	char **argv = *argvp;
	struct rtattr *vfinfo;
	int ret;

	tivt.min_tx_rate = -1;
	tivt.max_tx_rate = -1;

	vfinfo = addattr_nest(&req->n, sizeof(*req), IFLA_VF_INFO);

	while (NEXT_ARG_OK()) {
		NEXT_ARG();
		count++;
		if (!matches(*argv, "max_tx_rate")) {
			/* new API in use */
			new_rate_api = 1;
			/* override legacy rate */
			override_legacy_rate = 1;
		} else if (!matches(*argv, "min_tx_rate")) {
			/* new API in use */
			new_rate_api = 1;
		}
	}

	while (count--) {
		/* rewind arg */
		PREV_ARG();
	}

	while (NEXT_ARG_OK()) {
		NEXT_ARG();
		if (matches(*argv, "mac") == 0) {
			struct ifla_vf_mac ivm = { 0 };
			int halen = nl_get_ll_addr_len(dev);

			NEXT_ARG();
			ivm.vf = vf;
			len = ll_addr_a2n((char *)ivm.mac, 32, *argv);
			if (len < 0)
				return -1;
			if (halen > 0 && len != halen) {
				fprintf(stderr,
					"Invalid address length %d - must be %d bytes\n",
					len, halen);
				return -1;
			}
			addattr_l(&req->n, sizeof(*req), IFLA_VF_MAC,
				  &ivm, sizeof(ivm));
		} else if (matches(*argv, "vlan") == 0) {
			struct ifla_vf_vlan_info ivvi;

			iplink_parse_vf_vlan_info(vf, &argc, &argv, &ivvi);
			/* support the old interface in case of older kernel*/
			if (ivvi.vlan_proto == htons(ETH_P_8021Q)) {
				struct ifla_vf_vlan ivv;

				ivv.vf = ivvi.vf;
				ivv.vlan = ivvi.vlan;
				ivv.qos = ivvi.qos;
				addattr_l(&req->n, sizeof(*req),
					  IFLA_VF_VLAN, &ivv, sizeof(ivv));
			} else {
				struct rtattr *vfvlanlist;

				vfvlanlist = addattr_nest(&req->n, sizeof(*req),
							  IFLA_VF_VLAN_LIST);
				addattr_l(&req->n, sizeof(*req),
					  IFLA_VF_VLAN_INFO, &ivvi,
					  sizeof(ivvi));

				while (NEXT_ARG_OK()) {
					NEXT_ARG();
					if (matches(*argv, "vlan") != 0) {
						PREV_ARG();
						break;
					}
					iplink_parse_vf_vlan_info(vf, &argc,
								  &argv, &ivvi);
					addattr_l(&req->n, sizeof(*req),
						  IFLA_VF_VLAN_INFO, &ivvi,
						  sizeof(ivvi));
				}
				addattr_nest_end(&req->n, vfvlanlist);
			}
		} else if (matches(*argv, "rate") == 0) {
			struct ifla_vf_tx_rate ivt;

			NEXT_ARG();
			if (get_unsigned(&ivt.rate, *argv, 0))
				invarg("Invalid \"rate\" value\n", *argv);

			ivt.vf = vf;
			if (!new_rate_api)
				addattr_l(&req->n, sizeof(*req),
					  IFLA_VF_TX_RATE, &ivt, sizeof(ivt));
			else if (!override_legacy_rate)
				tivt.max_tx_rate = ivt.rate;

		} else if (matches(*argv, "max_tx_rate") == 0) {
			NEXT_ARG();
			if (get_unsigned(&tivt.max_tx_rate, *argv, 0))
				invarg("Invalid \"max tx rate\" value\n",
				       *argv);
			tivt.vf = vf;

		} else if (matches(*argv, "min_tx_rate") == 0) {
			NEXT_ARG();
			if (get_unsigned(&tivt.min_tx_rate, *argv, 0))
				invarg("Invalid \"min tx rate\" value\n",
				       *argv);
			tivt.vf = vf;

		} else if (matches(*argv, "spoofchk") == 0) {
			struct ifla_vf_spoofchk ivs;

			NEXT_ARG();
			ivs.setting = parse_on_off("spoofchk", *argv, &ret);
			if (ret)
				return ret;
			ivs.vf = vf;
			addattr_l(&req->n, sizeof(*req), IFLA_VF_SPOOFCHK,
				  &ivs, sizeof(ivs));

		} else if (matches(*argv, "query_rss") == 0) {
			struct ifla_vf_rss_query_en ivs;

			NEXT_ARG();
			ivs.setting = parse_on_off("query_rss", *argv, &ret);
			if (ret)
				return ret;
			ivs.vf = vf;
			addattr_l(&req->n, sizeof(*req), IFLA_VF_RSS_QUERY_EN,
				  &ivs, sizeof(ivs));

		} else if (matches(*argv, "trust") == 0) {
			struct ifla_vf_trust ivt;

			NEXT_ARG();
			ivt.setting = parse_on_off("trust", *argv, &ret);
			if (ret)
				return ret;
			ivt.vf = vf;
			addattr_l(&req->n, sizeof(*req), IFLA_VF_TRUST,
				  &ivt, sizeof(ivt));

		} else if (matches(*argv, "state") == 0) {
			struct ifla_vf_link_state ivl;

			NEXT_ARG();
			if (matches(*argv, "auto") == 0)
				ivl.link_state = IFLA_VF_LINK_STATE_AUTO;
			else if (matches(*argv, "enable") == 0)
				ivl.link_state = IFLA_VF_LINK_STATE_ENABLE;
			else if (matches(*argv, "disable") == 0)
				ivl.link_state = IFLA_VF_LINK_STATE_DISABLE;
			else
				invarg("Invalid \"state\" value\n", *argv);
			ivl.vf = vf;
			addattr_l(&req->n, sizeof(*req), IFLA_VF_LINK_STATE,
				  &ivl, sizeof(ivl));
		} else if (matches(*argv, "node_guid") == 0) {
			struct ifla_vf_guid ivg;

			NEXT_ARG();
			ivg.vf = vf;
			if (get_guid(&ivg.guid, *argv)) {
				invarg("Invalid GUID format\n", *argv);
				return -1;
			}
			addattr_l(&req->n, sizeof(*req), IFLA_VF_IB_NODE_GUID,
				  &ivg, sizeof(ivg));
		} else if (matches(*argv, "port_guid") == 0) {
			struct ifla_vf_guid ivg;

			NEXT_ARG();
			ivg.vf = vf;
			if (get_guid(&ivg.guid, *argv)) {
				invarg("Invalid GUID format\n", *argv);
				return -1;
			}
			addattr_l(&req->n, sizeof(*req), IFLA_VF_IB_PORT_GUID,
				  &ivg, sizeof(ivg));
		} else {
			/* rewind arg */
			PREV_ARG();
			break;
		}
	}

	if (new_rate_api) {
		int tmin, tmax;

		if (tivt.min_tx_rate == -1 || tivt.max_tx_rate == -1) {
			ipaddr_get_vf_rate(tivt.vf, &tmin, &tmax, dev);
			if (tivt.min_tx_rate == -1)
				tivt.min_tx_rate = tmin;
			if (tivt.max_tx_rate == -1)
				tivt.max_tx_rate = tmax;
		}

		if (tivt.max_tx_rate && tivt.min_tx_rate > tivt.max_tx_rate) {
			fprintf(stderr,
				"Invalid min_tx_rate %d - must be <= max_tx_rate %d\n",
				tivt.min_tx_rate, tivt.max_tx_rate);
			return -1;
		}

		addattr_l(&req->n, sizeof(*req), IFLA_VF_RATE, &tivt,
			  sizeof(tivt));
	}

	if (argc == *argcp)
		incomplete_command();

	addattr_nest_end(&req->n, vfinfo);

	*argcp = argc;
	*argvp = argv;
	return 0;
}

static int iplink_parse_inet(int *argcp, char ***argvp, struct iplink_req *req)
{
	struct rtattr *afs, *afinet, *inet_devconf;
	char **argv = *argvp;
	int argc = *argcp;
	bool val;
	int ret;

	afs = addattr_nest(&req->n, sizeof(*req), IFLA_AF_SPEC);
	afinet = addattr_nest(&req->n, sizeof(*req), AF_INET);
	inet_devconf = addattr_nest(&req->n, sizeof(*req),
				    IFLA_INET_CONF | NLA_F_NESTED);

	while (NEXT_ARG_OK()) {
		NEXT_ARG();
		if (strcmp(*argv, "forwarding") == 0) {
			NEXT_ARG();
			val = parse_on_off("forwarding", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_FORWARDING, val);
		} else if (strcmp(*argv, "proxy_arp") == 0) {
			NEXT_ARG();
			val = parse_on_off("proxy_arp", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_PROXY_ARP, val);
		} else if (strcmp(*argv, "accept_redirects") == 0) {
			NEXT_ARG();
			val = parse_on_off("accept_redirects", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_ACCEPT_REDIRECTS, val);
		} else if (strcmp(*argv, "secure_redirects") == 0) {
			NEXT_ARG();
			val = parse_on_off("secure_redirects", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_SECURE_REDIRECTS, val);
		} else if (strcmp(*argv, "send_redirects") == 0) {
			NEXT_ARG();
			val = parse_on_off("send_redirects", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_SEND_REDIRECTS, val);
		} else if (strcmp(*argv, "shared_media") == 0) {
			NEXT_ARG();
			val = parse_on_off("shared_media", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_SHARED_MEDIA, val);
		} else if (strcmp(*argv, "rp_filter") == 0) {
			int rp_filter;

			NEXT_ARG();
			if (get_integer(&rp_filter, *argv, 0)) {
				invarg("Invalid \"rp_filter\" value\n", *argv);
				return -1;
			}
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_RP_FILTER, rp_filter);
		} else if (strcmp(*argv, "accept_source_route") == 0) {
			NEXT_ARG();
			val = parse_on_off("accept_source_route", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_ACCEPT_SOURCE_ROUTE, val);
		} else if (strcmp(*argv, "bootp_relay") == 0) {
			NEXT_ARG();
			val = parse_on_off("bootp_relay", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_BOOTP_RELAY, val);
		} else if (strcmp(*argv, "log_martians") == 0) {
			NEXT_ARG();
			val = parse_on_off("log_martians", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_LOG_MARTIANS, val);
		} else if (strcmp(*argv, "tag") == 0) {
			int tag;

			NEXT_ARG();
			if (get_integer(&tag, *argv, 0)) {
				invarg("Invalid \"tag\" value\n", *argv);
				return -1;
			}
			addattr32(&req->n, sizeof(*req), IPV4_DEVCONF_TAG, tag);
		} else if (strcmp(*argv, "arp_filter") == 0) {
			NEXT_ARG();
			val = parse_on_off("arp_filter", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_ARPFILTER, val);
		} else if (strcmp(*argv, "medium_id") == 0) {
			int medium_id;

			NEXT_ARG();
			if (get_integer(&medium_id, *argv, 0)) {
				invarg("Invalid \"medium_id\" value\n", *argv);
				return -1;
			}
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_MEDIUM_ID, medium_id);
		} else if (strcmp(*argv, "disable_xfrm") == 0) {
			NEXT_ARG();
			val = parse_on_off("disable_xfrm", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_NOXFRM, val);
		} else if (strcmp(*argv, "disable_policy") == 0) {
			NEXT_ARG();
			val = parse_on_off("disable_policy", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_NOPOLICY, val);
		} else if (strcmp(*argv, "force_igmp_version") == 0) {
			int force_igmp_ver;

			NEXT_ARG();
			if (get_integer(&force_igmp_ver, *argv, 0)) {
				invarg("Invalid \"force_igmp_version\" value\n",
				       *argv);
				return -1;
			}
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_FORCE_IGMP_VERSION, force_igmp_ver);
		} else if (strcmp(*argv, "arp_announce") == 0) {
			int arp_announce;

			NEXT_ARG();
			if (get_integer(&arp_announce, *argv, 0)) {
				invarg("Invalid \"arp_announce\" value\n", *argv);
				return -1;
			}
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_ARP_ANNOUNCE, arp_announce);
		} else if (strcmp(*argv, "arp_ignore") == 0) {
			int arp_ignore;

			NEXT_ARG();
			if (get_integer(&arp_ignore, *argv, 0)) {
				invarg("Invalid \"arp_ignore\" value\n", *argv);
				return -1;
			}
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_ARP_IGNORE, arp_ignore);
		} else if (strcmp(*argv, "promote_secondaries") == 0) {
			NEXT_ARG();
			val = parse_on_off("promote_secondaries", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_PROMOTE_SECONDARIES, val);
		} else if (strcmp(*argv, "arp_accept") == 0) {
			int arp_accept;

			NEXT_ARG();
			if (get_integer(&arp_accept, *argv, 0)) {
				invarg("Invalid \"arp_accept\" value\n", *argv);
				return -1;
			}
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_ARP_ACCEPT, arp_accept);
		} else if (strcmp(*argv, "arp_notify") == 0) {
			NEXT_ARG();
			val = parse_on_off("arp_notify", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_ARP_NOTIFY, val);
		} else if (strcmp(*argv, "accept_local") == 0) {
			NEXT_ARG();
			val = parse_on_off("accept_local", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_ACCEPT_LOCAL, val);
		} else if (strcmp(*argv, "src_vmark") == 0) {
			NEXT_ARG();
			val = parse_on_off("src_vmark", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_SRC_VMARK, val);
		} else if (strcmp(*argv, "proxy_arp_pvlan") == 0) {
			NEXT_ARG();
			val = parse_on_off("proxy_arp_pvlan", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_PROXY_ARP_PVLAN, val);
		} else if (strcmp(*argv, "route_localnet") == 0) {
			NEXT_ARG();
			val = parse_on_off("route_localnet", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_ROUTE_LOCALNET, val);
		} else if (strcmp(*argv, "bc_forwarding") == 0) {
			NEXT_ARG();
			val = parse_on_off("bc_forwarding", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_BC_FORWARDING, val);
		} else if (!strcmp(*argv, "igmpv2_unsolicited_report_interval")) {
			int igmpv2_interval;

			NEXT_ARG();
			if (get_integer(&igmpv2_interval, *argv, 0)) {
				invarg("Invalid \"igmpv2_unsolicited_report_interval\" value\n",
				       *argv);
				return -1;
			}
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_IGMPV2_UNSOLICITED_REPORT_INTERVAL,
				  igmpv2_interval);
		} else if (!strcmp(*argv, "igmpv3_unsolicited_report_interval")) {
			int igmpv3_interval;

			NEXT_ARG();
			if (get_integer(&igmpv3_interval, *argv, 0)) {
				invarg("Invalid \"igmpv3_unsolicited_report_interval\" value\n",
				       *argv);
				return -1;
			}
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_IGMPV3_UNSOLICITED_REPORT_INTERVAL,
				  igmpv3_interval);
		} else if (strcmp(*argv, "ignore_routes_with_linkdown") == 0) {
			NEXT_ARG();
			val = parse_on_off("ignore_routes_with_linkdown",
					   *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_IGNORE_ROUTES_WITH_LINKDOWN, val);
		} else if (strcmp(*argv, "drop_unicast_in_l2_multicast") == 0) {
			NEXT_ARG();
			val = parse_on_off("drop_unicast_in_l2_multicast",
					   *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_DROP_UNICAST_IN_L2_MULTICAST, val);
		} else if (strcmp(*argv, "drop_gratuitous_arp") == 0) {
			NEXT_ARG();
			val = parse_on_off("drop_gratuitous_arp", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_DROP_GRATUITOUS_ARP, val);
		} else if (strcmp(*argv, "arp_evict_nocarrier") == 0) {
			NEXT_ARG();
			val = parse_on_off("arp_evict_nocarrier", *argv, &ret);
			if (ret)
				return ret;
			addattr32(&req->n, sizeof(*req),
				  IPV4_DEVCONF_ARP_EVICT_NOCARRIER, val);
		} else {
			/* rewind arg */
			PREV_ARG();
			break;
		}
	}

	if (argc == *argcp)
		incomplete_command();

	addattr_nest_end(&req->n, inet_devconf);
	addattr_nest_end(&req->n, afinet);
	addattr_nest_end(&req->n, afs);

	*argcp = argc;
	*argvp = argv;
	return 0;
}

int iplink_parse(int argc, char **argv, struct iplink_req *req, char **type)
{
	bool move_netns = false;
	char *name = NULL;
	char *dev = NULL;
	char *link = NULL;
	int ret, len;
	char abuf[32];
	int qlen = -1;
	int mtu = -1;
	int netns = -1;
	int vf = -1;
	int numtxqueues = -1;
	int numrxqueues = -1;
	char *link_netns = NULL;
	int link_netnsid = -1;
	struct rtnl_handle netns_rtnl;
	struct rtnl_handle *rtnl = &rth;
	int index = 0;
	int group = -1;
	int addr_len = 0;
	int err;

	ret = argc;

	while (argc > 0) {
		if (strcmp(*argv, "up") == 0) {
			req->i.ifi_change |= IFF_UP;
			req->i.ifi_flags |= IFF_UP;
		} else if (strcmp(*argv, "down") == 0) {
			req->i.ifi_change |= IFF_UP;
			req->i.ifi_flags &= ~IFF_UP;
		} else if (strcmp(*argv, "name") == 0) {
			NEXT_ARG();
			if (name)
				duparg("name", *argv);
			if (check_ifname(*argv))
				invarg("\"name\" not a valid ifname", *argv);
			name = *argv;
			if (!dev)
				dev = name;
		} else if (strcmp(*argv, "index") == 0) {
			NEXT_ARG();
			if (index)
				duparg("index", *argv);
			index = atoi(*argv);
			if (index <= 0)
				invarg("Invalid \"index\" value", *argv);
		} else if (matches(*argv, "link") == 0) {
			NEXT_ARG();
			link = *argv;
		} else if (matches(*argv, "address") == 0) {
			NEXT_ARG();
			addr_len = ll_addr_a2n(abuf, sizeof(abuf), *argv);
			if (addr_len < 0)
				return -1;
			addattr_l(&req->n, sizeof(*req),
				  IFLA_ADDRESS, abuf, addr_len);
		} else if (matches(*argv, "broadcast") == 0 ||
			   strcmp(*argv, "brd") == 0) {
			NEXT_ARG();
			len = ll_addr_a2n(abuf, sizeof(abuf), *argv);
			if (len < 0)
				return -1;
			addattr_l(&req->n, sizeof(*req),
				  IFLA_BROADCAST, abuf, len);
		} else if (matches(*argv, "txqueuelen") == 0 ||
			   strcmp(*argv, "qlen") == 0 ||
			   matches(*argv, "txqlen") == 0) {
			NEXT_ARG();
			if (qlen != -1)
				duparg("txqueuelen", *argv);
			if (get_integer(&qlen,  *argv, 0))
				invarg("Invalid \"txqueuelen\" value\n", *argv);
			addattr_l(&req->n, sizeof(*req),
				  IFLA_TXQLEN, &qlen, 4);
		} else if (strcmp(*argv, "mtu") == 0) {
			NEXT_ARG();
			if (mtu != -1)
				duparg("mtu", *argv);
			if (get_integer(&mtu, *argv, 0))
				invarg("Invalid \"mtu\" value\n", *argv);
			addattr_l(&req->n, sizeof(*req), IFLA_MTU, &mtu, 4);
		} else if (strcmp(*argv, "inet") == 0) {
			if (iplink_parse_inet(&argc, &argv, req) < 0)
				return -1;
		} else if (strcmp(*argv, "xdpgeneric") == 0 ||
			   strcmp(*argv, "xdpdrv") == 0 ||
			   strcmp(*argv, "xdpoffload") == 0 ||
			   strcmp(*argv, "xdp") == 0) {
			bool generic = strcmp(*argv, "xdpgeneric") == 0;
			bool drv = strcmp(*argv, "xdpdrv") == 0;
			bool offload = strcmp(*argv, "xdpoffload") == 0;

			NEXT_ARG();
			if (xdp_parse(&argc, &argv, req, dev,
				      generic, drv, offload))
				exit(-1);

			if (offload && name == dev)
				dev = NULL;
		} else if (strcmp(*argv, "netns") == 0) {
			NEXT_ARG();
			if (netns != -1)
				duparg("netns", *argv);
			/* try by name then by pid */
			netns = netns_get_fd(*argv);
			if (netns < 0)
				invarg("Invalid \"netns\" value\n", *argv);

			open_fds_add(netns);
			addattr_l(&req->n, sizeof(*req), IFLA_NET_NS_FD,
				  &netns, 4);
			move_netns = true;
		} else if (strcmp(*argv, "multicast") == 0) {
			NEXT_ARG();
			req->i.ifi_change |= IFF_MULTICAST;

			if (strcmp(*argv, "on") == 0)
				req->i.ifi_flags |= IFF_MULTICAST;
			else if (strcmp(*argv, "off") == 0)
				req->i.ifi_flags &= ~IFF_MULTICAST;
			else
				return on_off("multicast", *argv);
		} else if (strcmp(*argv, "allmulticast") == 0) {
			NEXT_ARG();
			req->i.ifi_change |= IFF_ALLMULTI;

			if (strcmp(*argv, "on") == 0)
				req->i.ifi_flags |= IFF_ALLMULTI;
			else if (strcmp(*argv, "off") == 0)
				req->i.ifi_flags &= ~IFF_ALLMULTI;
			else
				return on_off("allmulticast", *argv);
		} else if (strcmp(*argv, "promisc") == 0) {
			NEXT_ARG();
			req->i.ifi_change |= IFF_PROMISC;

			if (strcmp(*argv, "on") == 0)
				req->i.ifi_flags |= IFF_PROMISC;
			else if (strcmp(*argv, "off") == 0)
				req->i.ifi_flags &= ~IFF_PROMISC;
			else
				return on_off("promisc", *argv);
		} else if (strcmp(*argv, "trailers") == 0) {
			NEXT_ARG();
			req->i.ifi_change |= IFF_NOTRAILERS;

			if (strcmp(*argv, "off") == 0)
				req->i.ifi_flags |= IFF_NOTRAILERS;
			else if (strcmp(*argv, "on") == 0)
				req->i.ifi_flags &= ~IFF_NOTRAILERS;
			else
				return on_off("trailers", *argv);
		} else if (strcmp(*argv, "arp") == 0) {
			NEXT_ARG();
			req->i.ifi_change |= IFF_NOARP;

			if (strcmp(*argv, "on") == 0)
				req->i.ifi_flags &= ~IFF_NOARP;
			else if (strcmp(*argv, "off") == 0)
				req->i.ifi_flags |= IFF_NOARP;
			else
				return on_off("arp", *argv);
		} else if (strcmp(*argv, "carrier") == 0) {
			int carrier;

			NEXT_ARG();
			carrier = parse_on_off("carrier", *argv, &err);
			if (err)
				return err;

			addattr8(&req->n, sizeof(*req), IFLA_CARRIER, carrier);
		} else if (strcmp(*argv, "vf") == 0) {
			struct rtattr *vflist;

			NEXT_ARG();
			if (get_integer(&vf,  *argv, 0))
				invarg("Invalid \"vf\" value\n", *argv);

			vflist = addattr_nest(&req->n, sizeof(*req),
					      IFLA_VFINFO_LIST);
			if (!dev)
				missarg("dev");

			len = iplink_parse_vf(vf, &argc, &argv, req, dev);
			if (len < 0)
				return -1;
			addattr_nest_end(&req->n, vflist);

			if (name == dev)
				dev = NULL;
		} else if (matches(*argv, "master") == 0) {
			int ifindex;

			NEXT_ARG();
			ifindex = ll_name_to_index(*argv);
			if (!ifindex)
				invarg("Device does not exist\n", *argv);
			addattr_l(&req->n, sizeof(*req), IFLA_MASTER,
				  &ifindex, 4);
		} else if (strcmp(*argv, "vrf") == 0) {
			int ifindex;

			NEXT_ARG();
			ifindex = ll_name_to_index(*argv);
			if (!ifindex)
				invarg("Not a valid VRF name\n", *argv);
			if (!name_is_vrf(*argv))
				invarg("Not a valid VRF name\n", *argv);
			addattr_l(&req->n, sizeof(*req), IFLA_MASTER,
				  &ifindex, sizeof(ifindex));
		} else if (matches(*argv, "nomaster") == 0) {
			int ifindex = 0;

			addattr_l(&req->n, sizeof(*req), IFLA_MASTER,
				  &ifindex, 4);
		} else if (matches(*argv, "dynamic") == 0) {
			NEXT_ARG();
			req->i.ifi_change |= IFF_DYNAMIC;

			if (strcmp(*argv, "on") == 0)
				req->i.ifi_flags |= IFF_DYNAMIC;
			else if (strcmp(*argv, "off") == 0)
				req->i.ifi_flags &= ~IFF_DYNAMIC;
			else
				return on_off("dynamic", *argv);
		} else if (matches(*argv, "type") == 0) {
			NEXT_ARG();
			*type = *argv;
			argc--; argv++;
			break;
		} else if (matches(*argv, "alias") == 0) {
			NEXT_ARG();
			len = strlen(*argv);
			if (len >= IFALIASZ)
				invarg("alias too long\n", *argv);
			addattr_l(&req->n, sizeof(*req), IFLA_IFALIAS,
				  *argv, len);
		} else if (strcmp(*argv, "group") == 0) {
			NEXT_ARG();
			if (group != -1)
				duparg("group", *argv);
			if (rtnl_group_a2n(&group, *argv))
				invarg("Invalid \"group\" value\n", *argv);
			addattr32(&req->n, sizeof(*req), IFLA_GROUP, group);
		} else if (strcmp(*argv, "mode") == 0) {
			int mode;

			NEXT_ARG();
			mode = get_link_mode(*argv);
			if (mode < 0)
				invarg("Invalid link mode\n", *argv);
			addattr8(&req->n, sizeof(*req), IFLA_LINKMODE, mode);
		} else if (strcmp(*argv, "state") == 0) {
			int state;

			NEXT_ARG();
			state = get_operstate(*argv);
			if (state < 0)
				invarg("Invalid operstate\n", *argv);

			addattr8(&req->n, sizeof(*req), IFLA_OPERSTATE, state);
		} else if (matches(*argv, "numtxqueues") == 0) {
			NEXT_ARG();
			if (numtxqueues != -1)
				duparg("numtxqueues", *argv);
			if (get_integer(&numtxqueues, *argv, 0))
				invarg("Invalid \"numtxqueues\" value\n",
				       *argv);
			addattr_l(&req->n, sizeof(*req), IFLA_NUM_TX_QUEUES,
				  &numtxqueues, 4);
		} else if (matches(*argv, "numrxqueues") == 0) {
			NEXT_ARG();
			if (numrxqueues != -1)
				duparg("numrxqueues", *argv);
			if (get_integer(&numrxqueues, *argv, 0))
				invarg("Invalid \"numrxqueues\" value\n",
				       *argv);
			addattr_l(&req->n, sizeof(*req), IFLA_NUM_RX_QUEUES,
				  &numrxqueues, 4);
		} else if (matches(*argv, "addrgenmode") == 0) {
			struct rtattr *afs, *afs6;
			int mode;

			NEXT_ARG();
			mode = get_addr_gen_mode(*argv);
			if (mode < 0)
				invarg("Invalid address generation mode\n",
				       *argv);
			afs = addattr_nest(&req->n, sizeof(*req), IFLA_AF_SPEC);
			afs6 = addattr_nest(&req->n, sizeof(*req), AF_INET6);
			addattr8(&req->n, sizeof(*req),
				 IFLA_INET6_ADDR_GEN_MODE, mode);
			addattr_nest_end(&req->n, afs6);
			addattr_nest_end(&req->n, afs);
		} else if (matches(*argv, "link-netns") == 0) {
			NEXT_ARG();
			if (link_netnsid != -1 || link_netns)
				duparg("link-netns/link-netnsid", *argv);
			link_netns = *argv;
		} else if (matches(*argv, "link-netnsid") == 0) {
			NEXT_ARG();
			if (link_netnsid != -1 || link_netns)
				duparg("link-netns/link-netnsid", *argv);
			if (get_integer(&link_netnsid, *argv, 0))
				invarg("Invalid \"link-netnsid\" value\n",
				       *argv);
			addattr32(&req->n, sizeof(*req), IFLA_LINK_NETNSID,
				  link_netnsid);
		} else if (strcmp(*argv, "protodown") == 0) {
			unsigned int proto_down;

			NEXT_ARG();
			proto_down = parse_on_off("protodown", *argv, &err);
			if (err)
				return err;
			addattr8(&req->n, sizeof(*req), IFLA_PROTO_DOWN,
				 proto_down);
		} else if (strcmp(*argv, "protodown_reason") == 0) {
			struct rtattr *pr;
			__u32 preason = 0, prvalue = 0, prmask = 0;

			NEXT_ARG();
			if (protodown_reason_a2n(&preason, *argv))
				invarg("invalid protodown reason\n", *argv);
			NEXT_ARG();
			prmask = 1 << preason;
			if (matches(*argv, "on") == 0)
				prvalue |= prmask;
			else if (matches(*argv, "off") == 0)
				prvalue &= ~prmask;
			else
				return on_off("protodown_reason", *argv);
			pr = addattr_nest(&req->n, sizeof(*req),
					  IFLA_PROTO_DOWN_REASON | NLA_F_NESTED);
			addattr32(&req->n, sizeof(*req),
				  IFLA_PROTO_DOWN_REASON_MASK, prmask);
			addattr32(&req->n, sizeof(*req),
				  IFLA_PROTO_DOWN_REASON_VALUE, prvalue);
			addattr_nest_end(&req->n, pr);
		} else if (strcmp(*argv, "gso_max_size") == 0) {
			unsigned int max_size;

			NEXT_ARG();
			if (get_unsigned(&max_size, *argv, 0))
				invarg("Invalid \"gso_max_size\" value\n",
				       *argv);
			addattr32(&req->n, sizeof(*req),
				  IFLA_GSO_MAX_SIZE, max_size);
		} else if (strcmp(*argv, "gso_max_segs") == 0) {
			unsigned int max_segs;

			NEXT_ARG();
			if (get_unsigned(&max_segs, *argv, 0) ||
			    max_segs > GSO_MAX_SEGS)
				invarg("Invalid \"gso_max_segs\" value\n",
				       *argv);
			addattr32(&req->n, sizeof(*req),
				  IFLA_GSO_MAX_SEGS, max_segs);
		}  else if (strcmp(*argv, "gro_max_size") == 0) {
			unsigned int max_size;

			NEXT_ARG();
			if (get_unsigned(&max_size, *argv, 0))
				invarg("Invalid \"gro_max_size\" value\n",
				       *argv);
			addattr32(&req->n, sizeof(*req),
				  IFLA_GRO_MAX_SIZE, max_size);
		} else if (strcmp(*argv, "gso_ipv4_max_size") == 0) {
			unsigned int max_size;

			NEXT_ARG();
			if (get_unsigned(&max_size, *argv, 0))
				invarg("Invalid \"gso_ipv4_max_size\" value\n",
				       *argv);
			addattr32(&req->n, sizeof(*req),
				  IFLA_GSO_IPV4_MAX_SIZE, max_size);
		}  else if (strcmp(*argv, "gro_ipv4_max_size") == 0) {
			unsigned int max_size;

			NEXT_ARG();
			if (get_unsigned(&max_size, *argv, 0))
				invarg("Invalid \"gro_ipv4_max_size\" value\n",
				       *argv);
			addattr32(&req->n, sizeof(*req),
				  IFLA_GRO_IPV4_MAX_SIZE, max_size);
		} else if (strcmp(*argv, "parentdev") == 0) {
			NEXT_ARG();
			addattr_l(&req->n, sizeof(*req), IFLA_PARENT_DEV_NAME,
				  *argv, strlen(*argv) + 1);
		} else {
			if (matches(*argv, "help") == 0)
				usage();

			if (strcmp(*argv, "dev") == 0)
				NEXT_ARG();
			if (dev != name)
				duparg2("dev", *argv);
			if (check_altifname(*argv))
				invarg("\"dev\" not a valid ifname", *argv);
			dev = *argv;
		}
		argc--; argv++;
	}

	ret -= argc;

	/* Allow "ip link add dev" and "ip link add name" */
	if (!name)
		name = dev;
	else if (!dev)
		dev = name;
	else if (!strcmp(name, dev))
		name = dev;

	if (dev && addr_len &&
	    !(req->n.nlmsg_flags & NLM_F_CREATE)) {
		int halen = nl_get_ll_addr_len(dev);

		if (halen >= 0 && halen != addr_len) {
			fprintf(stderr,
				"Invalid address length %d - must be %d bytes\n",
				addr_len, halen);
			return -1;
		}
	}

	if (index &&
	    (!(req->n.nlmsg_flags & NLM_F_CREATE) &&
	     !move_netns)) {
		fprintf(stderr,
			"index can be used only when creating devices or when moving device to another netns.\n");
		exit(-1);
	}

	if (group != -1) {
		if (!dev) {
			if (argc) {
				fprintf(stderr,
					"Garbage instead of arguments \"%s ...\". Try \"ip link help\".\n",
					*argv);
				exit(-1);
			}
			if (req->n.nlmsg_flags & NLM_F_CREATE) {
				fprintf(stderr,
					"group cannot be used when creating devices.\n");
				exit(-1);
			}

			*type = NULL;
			return ret;
		}
	}

	if (netns != -1 && (link_netnsid != -1 || link_netns)) {
		int orig_netns;

		/*
		 * When both link-netns and netns are set, open an RTNL in
		 * target netns, to
		 *   1) get link-netns id from the view of target netns, and
		 *   2) get link ifindex from link-netns.
		 */
		orig_netns = open("/proc/self/ns/net", O_RDONLY);
		if (orig_netns == -1) {
			fprintf(stderr, "Cannot open namespace: %s\n",
				strerror(errno));
			exit(-1);
		}
		if (setns(netns, CLONE_NEWNET) < 0) {
			fprintf(stderr, "Cannot set namespace: %s\n",
				strerror(errno));
			exit(-1);
		}
		if (rtnl_open(&netns_rtnl, 0) < 0) {
			fprintf(stderr, "Cannot open rtnetlink\n");
			exit(-1);
		}
		if (setns(orig_netns, CLONE_NEWNET) < 0) {
			fprintf(stderr, "Cannot set namespace: %s\n",
				strerror(errno));
			exit(-1);
		}
		close(orig_netns);
		rtnl = &netns_rtnl;
	}

	if (link_netns) {
		link_netnsid = netns_id_from_name(rtnl, link_netns);
		/* No nsid? Try to assign one. */
		if (link_netnsid < 0) {
			set_netns_id_from_name(rtnl, link_netns, -1);
			link_netnsid = netns_id_from_name(rtnl, link_netns);
		}
		if (link_netnsid < 0)
			invarg("Invalid \"link-netns\" value\n",
			       *argv);
		addattr32(&req->n, sizeof(*req), IFLA_LINK_NETNSID,
			  link_netnsid);
	}

	if (!(req->n.nlmsg_flags & NLM_F_CREATE)) {
		if (!dev) {
			fprintf(stderr,
				"Not enough information: \"dev\" argument is required.\n");
			exit(-1);
		}

		req->i.ifi_index = ll_name_to_index(dev);
		if (!req->i.ifi_index) {
			ret = nodev(dev);
			goto out;
		}

		/* Not renaming to the same name */
		if (name == dev)
			name = NULL;

		if (index)
			addattr32(&req->n, sizeof(*req), IFLA_NEW_IFINDEX, index);
	} else {
		if (name != dev) {
			fprintf(stderr,
				"both \"name\" and \"dev\" cannot be used when creating devices.\n");
			exit(-1);
		}

		if (link) {
			int ifindex;

			if (link_netnsid == -1)
				ifindex = ll_name_to_index(link);
			else
				ifindex = get_ifindex_in_netns(rtnl,
							       link_netnsid,
							       link);

			if (!ifindex) {
				ret = nodev(link);
				goto out;
			}
			addattr32(&req->n, sizeof(*req), IFLA_LINK, ifindex);
		}

		req->i.ifi_index = index;
	}

	if (name) {
		addattr_l(&req->n, sizeof(*req),
			  IFLA_IFNAME, name, strlen(name) + 1);
	}

out:
	if (rtnl == &netns_rtnl)
		rtnl_close(rtnl);

	return ret;
}

static int iplink_modify(int cmd, unsigned int flags, int argc, char **argv)
{
	char *type = NULL;
	struct iplink_req req = {
		.n.nlmsg_len = NLMSG_LENGTH(sizeof(struct ifinfomsg)),
		.n.nlmsg_flags = NLM_F_REQUEST | flags,
		.n.nlmsg_type = cmd,
		.i.ifi_family = preferred_family,
	};
	int ret;

	ret = iplink_parse(argc, argv, &req, &type);
	if (ret < 0)
		return ret;

	if (type) {
		struct link_util *lu;
		struct rtattr *linkinfo;
		char *ulinep = strchr(type, '_');
		int iflatype;

		linkinfo = addattr_nest(&req.n, sizeof(req), IFLA_LINKINFO);
		addattr_l(&req.n, sizeof(req), IFLA_INFO_KIND, type,
			 strlen(type) + 1);

		lu = get_link_kind(type);
		if (ulinep && !strcmp(ulinep, "_slave"))
			iflatype = IFLA_INFO_SLAVE_DATA;
		else
			iflatype = IFLA_INFO_DATA;

		argc -= ret;
		argv += ret;

		if (lu && lu->parse_opt && argc) {
			struct rtattr *data;

			data = addattr_nest(&req.n, sizeof(req), iflatype);

			if (lu->parse_opt(lu, argc, argv, &req.n))
				return -1;

			addattr_nest_end(&req.n, data);
		} else if (argc) {
			if (matches(*argv, "help") == 0)
				usage();
			fprintf(stderr,
				"Garbage instead of arguments \"%s ...\". Try \"ip link help\".\n",
				*argv);
			return -1;
		}
		addattr_nest_end(&req.n, linkinfo);
	} else if (flags & NLM_F_CREATE) {
		fprintf(stderr,
			"Not enough information: \"type\" argument is required\n");
		return -1;
	}

	if (echo_request)
		ret = rtnl_echo_talk(&rth, &req.n, json, print_linkinfo);
	else
		ret = rtnl_talk(&rth, &req.n, NULL);

	open_fds_close();

	if (ret)
		return -2;

	/* remove device from cache; next use can refresh with new data */
	ll_drop_by_index(req.i.ifi_index);

	return 0;
}

int iplink_get(char *name, __u32 filt_mask)
{
	struct iplink_req req = {
		.n.nlmsg_len = NLMSG_LENGTH(sizeof(struct ifinfomsg)),
		.n.nlmsg_flags = NLM_F_REQUEST,
		.n.nlmsg_type = RTM_GETLINK,
		.i.ifi_family = preferred_family,
	};
	struct nlmsghdr *answer;

	if (name) {
		addattr_l(&req.n, sizeof(req),
			  !check_ifname(name) ? IFLA_IFNAME : IFLA_ALT_IFNAME,
			  name, strlen(name) + 1);
	}

	if (!show_stats)
		filt_mask |= RTEXT_FILTER_SKIP_STATS;
	addattr32(&req.n, sizeof(req), IFLA_EXT_MASK, filt_mask);

	if (rtnl_talk(&rth, &req.n, &answer) < 0)
		return -2;

	open_json_object(NULL);
	print_linkinfo(answer, stdout);
	close_json_object();

	free(answer);
	return 0;
}


void print_mpls_link_stats(FILE *fp, const struct mpls_link_stats *stats,
			   const char *indent)
{
	unsigned int cols[] = {
		strlen("*X: bytes"),
		strlen("packets"),
		strlen("errors"),
		strlen("dropped"),
		strlen("noroute"),
	};

	if (is_json_context()) {
		/* RX stats */
		open_json_object("rx");
		print_u64(PRINT_JSON, "bytes", NULL, stats->rx_bytes);
		print_u64(PRINT_JSON, "packets", NULL, stats->rx_packets);
		print_u64(PRINT_JSON, "errors", NULL, stats->rx_errors);
		print_u64(PRINT_JSON, "dropped", NULL, stats->rx_dropped);
		print_u64(PRINT_JSON, "noroute", NULL, stats->rx_noroute);
		close_json_object();

		/* TX stats */
		open_json_object("tx");
		print_u64(PRINT_JSON, "bytes", NULL, stats->tx_bytes);
		print_u64(PRINT_JSON, "packets", NULL, stats->tx_packets);
		print_u64(PRINT_JSON, "errors", NULL, stats->tx_errors);
		print_u64(PRINT_JSON, "dropped", NULL, stats->tx_dropped);
		close_json_object();
	} else {
		size_columns(cols, ARRAY_SIZE(cols), stats->rx_bytes,
			     stats->rx_packets, stats->rx_errors,
			     stats->rx_dropped, stats->rx_noroute);
		size_columns(cols, ARRAY_SIZE(cols), stats->tx_bytes,
			     stats->tx_packets, stats->tx_errors,
			     stats->tx_dropped, 0);

		fprintf(fp, "%sRX: %*s %*s %*s %*s %*s%s", indent,
			cols[0] - 4, "bytes", cols[1], "packets",
			cols[2], "errors", cols[3], "dropped",
			cols[4], "noroute", _SL_);
		fprintf(fp, "%s", indent);
		print_num(fp, cols[0], stats->rx_bytes);
		print_num(fp, cols[1], stats->rx_packets);
		print_num(fp, cols[2], stats->rx_errors);
		print_num(fp, cols[3], stats->rx_dropped);
		print_num(fp, cols[4], stats->rx_noroute);
		print_nl();

		fprintf(fp, "%sTX: %*s %*s %*s %*s%s", indent,
			cols[0] - 4, "bytes", cols[1], "packets",
			cols[2], "errors", cols[3], "dropped", _SL_);
		fprintf(fp, "%s", indent);
		print_num(fp, cols[0], stats->tx_bytes);
		print_num(fp, cols[1], stats->tx_packets);
		print_num(fp, cols[2], stats->tx_errors);
		print_num(fp, cols[3], stats->tx_dropped);
	}
}

static void print_mpls_stats(FILE *fp, struct rtattr *attr)
{
	struct rtattr *mrtb[MPLS_STATS_MAX+1];
	struct mpls_link_stats *stats;

	parse_rtattr(mrtb, MPLS_STATS_MAX, RTA_DATA(attr),
		     RTA_PAYLOAD(attr));
	if (!mrtb[MPLS_STATS_LINK])
		return;

	stats = RTA_DATA(mrtb[MPLS_STATS_LINK]);
	print_string(PRINT_FP, NULL, "    mpls:", NULL);
	print_nl();
	print_mpls_link_stats(fp, stats, "        ");
	print_string(PRINT_FP, NULL, "%s", "\n");
}

static void print_af_stats_attr(FILE *fp, int ifindex, struct rtattr *attr)
{
	bool if_printed = false;
	struct rtattr *i;
	int rem;

	rem = RTA_PAYLOAD(attr);
	for (i = RTA_DATA(attr); RTA_OK(i, rem); i = RTA_NEXT(i, rem)) {
		if (preferred_family != AF_UNSPEC &&
		    i->rta_type != preferred_family)
			continue;

		if (!if_printed) {
			print_uint(PRINT_ANY, "ifindex",
				   "%u:", ifindex);
			print_color_string(PRINT_ANY, COLOR_IFNAME,
					   "ifname", "%s",
					   ll_index_to_name(ifindex));
			print_nl();
			if_printed = true;
		}

		switch (i->rta_type) {
		case AF_MPLS:
			print_mpls_stats(fp, i);
			break;
		default:
			fprintf(stderr, "    unknown af(%d)\n", i->rta_type);
			break;
		}
	}
}

struct af_stats_ctx {
	FILE *fp;
	int ifindex;
};

static int print_af_stats(struct nlmsghdr *n, void *arg)
{
	struct if_stats_msg *ifsm = NLMSG_DATA(n);
	struct rtattr *tb[IFLA_STATS_MAX+1];
	int len = n->nlmsg_len;
	struct af_stats_ctx *ctx = arg;
	FILE *fp = ctx->fp;

	len -= NLMSG_LENGTH(sizeof(*ifsm));
	if (len < 0) {
		fprintf(stderr, "BUG: wrong nlmsg len %d\n", len);
		return -1;
	}

	if (ctx->ifindex && ifsm->ifindex != ctx->ifindex)
		return 0;

	parse_rtattr(tb, IFLA_STATS_MAX, IFLA_STATS_RTA(ifsm), len);

	if (tb[IFLA_STATS_AF_SPEC])
		print_af_stats_attr(fp, ifsm->ifindex, tb[IFLA_STATS_AF_SPEC]);

	return 0;
}

static int iplink_afstats(int argc, char **argv)
{
	__u32 filt_mask = IFLA_STATS_FILTER_BIT(IFLA_STATS_AF_SPEC);
	const char *filter_dev = NULL;
	struct af_stats_ctx ctx = {
		.fp = stdout,
		.ifindex = 0,
	};

	while (argc > 0) {
		if (strcmp(*argv, "dev") == 0) {
			NEXT_ARG();
			if (filter_dev)
				duparg2("dev", *argv);
			filter_dev = *argv;
		} else if (matches(*argv, "help") == 0) {
			usage();
		} else {
			fprintf(stderr,
				"Command \"%s\" is unknown, try \"ip link help\".\n",
				*argv);
			exit(-1);
		}

		argv++; argc--;
	}

	if (filter_dev) {
		ctx.ifindex = ll_name_to_index(filter_dev);
		if (ctx.ifindex <= 0) {
			fprintf(stderr,
				"Device \"%s\" does not exist.\n",
				filter_dev);
			return -1;
		}
	}

	new_json_obj(json);

	if (rtnl_statsdump_req_filter(&rth, AF_UNSPEC, filt_mask,
				      NULL, NULL) < 0) {
		perror("Cannot send dump request");
		delete_json_obj();
		return 1;
	}

	if (rtnl_dump_filter(&rth, print_af_stats, &ctx) < 0) {
		fprintf(stderr, "Dump terminated\n");
		delete_json_obj();
		return 1;
	}

	delete_json_obj();
	return 0;
}

static int iplink_prop_mod(int argc, char **argv, struct iplink_req *req)
{
	struct rtattr *proplist;
	char *dev = NULL;
	char *name;

	proplist = addattr_nest(&req->n, sizeof(*req),
				IFLA_PROP_LIST | NLA_F_NESTED);

	while (argc > 0) {
		if (matches(*argv, "altname") == 0) {
			NEXT_ARG();
			if (check_altifname(*argv))
				invarg("not a valid altname", *argv);
			name = *argv;
			addattr_l(&req->n, sizeof(*req), IFLA_ALT_IFNAME,
				  name, strlen(name) + 1);
		} else if (matches(*argv, "help") == 0) {
			usage();
		} else {
			if (strcmp(*argv, "dev") == 0)
				NEXT_ARG();
			if (dev)
				duparg2("dev", *argv);
			if (check_altifname(*argv))
				invarg("\"dev\" not a valid ifname", *argv);
			dev = *argv;
		}
		argv++; argc--;
	}
	addattr_nest_end(&req->n, proplist);

	if (!dev) {
		fprintf(stderr, "Not enough of information: \"dev\" argument is required.\n");
		exit(-1);
	}

	req->i.ifi_index = ll_name_to_index(dev);
	if (!req->i.ifi_index)
		return nodev(dev);

	if (rtnl_talk(&rth, &req->n, NULL) < 0)
		return -2;

	return 0;
}

static int iplink_prop(int argc, char **argv)
{
	struct iplink_req req = {
		.n.nlmsg_len = NLMSG_LENGTH(sizeof(struct ifinfomsg)),
		.n.nlmsg_flags = NLM_F_REQUEST,
		.i.ifi_family = preferred_family,
	};

	if (argc <= 0) {
		usage();
		exit(-1);
	}

	if (matches(*argv, "add") == 0) {
		req.n.nlmsg_flags |= NLM_F_EXCL | NLM_F_CREATE | NLM_F_APPEND;
		req.n.nlmsg_type = RTM_NEWLINKPROP;
	} else if (matches(*argv, "del") == 0) {
		req.n.nlmsg_type = RTM_DELLINKPROP;
	} else if (matches(*argv, "help") == 0) {
		usage();
	} else {
		fprintf(stderr, "Operator required\n");
		exit(-1);
	}
	return iplink_prop_mod(argc - 1, argv + 1, &req);
}

static void do_help(int argc, char **argv)
{
	struct link_util *lu = NULL;

	if (argc <= 0) {
		usage();
		return;
	}

	lu = get_link_kind(*argv);
	if (lu && lu->print_help)
		lu->print_help(lu, argc-1, argv+1, stdout);
	else
		usage();
}

int do_iplink(int argc, char **argv)
{
	if (argc < 1)
		return ipaddr_list_link(0, NULL);

	if (matches(*argv, "add") == 0)
		return iplink_modify(RTM_NEWLINK,
				     NLM_F_CREATE|NLM_F_EXCL,
				     argc-1, argv+1);
	if (matches(*argv, "set") == 0 ||
	    matches(*argv, "change") == 0)
		return iplink_modify(RTM_NEWLINK, 0,
				     argc-1, argv+1);
	if (matches(*argv, "replace") == 0)
		return iplink_modify(RTM_NEWLINK,
				     NLM_F_CREATE|NLM_F_REPLACE,
				     argc-1, argv+1);
	if (matches(*argv, "delete") == 0)
		return iplink_modify(RTM_DELLINK, 0,
				     argc-1, argv+1);
	if (matches(*argv, "show") == 0 ||
	    matches(*argv, "lst") == 0 ||
	    matches(*argv, "list") == 0)
		return ipaddr_list_link(argc-1, argv+1);

	if (matches(*argv, "xstats") == 0)
		return iplink_ifla_xstats(argc-1, argv+1);

	if (matches(*argv, "afstats") == 0) {
		iplink_afstats(argc-1, argv+1);
		return 0;
	}

	if (matches(*argv, "property") == 0)
		return iplink_prop(argc-1, argv+1);

	if (matches(*argv, "help") == 0) {
		do_help(argc-1, argv+1);
		return 0;
	}

	fprintf(stderr, "Command \"%s\" is unknown, try \"ip link help\".\n",
		*argv);
	exit(-1);
}