diff --git a/drivers/net/geneve.c b/drivers/net/geneve.c
index bb275b30d3e5..72023ebd0e1b 100644
--- a/drivers/net/geneve.c
+++ b/drivers/net/geneve.c
@@ -2394,6 +2394,9 @@ static int geneve_changelink(struct net_device *dev, struct nlattr *tb[],
 	struct geneve_config cfg;
 	int err;
 
+	if (!rtnl_dev_link_net_capable(dev, geneve->net))
+		return -EPERM;
+
 	/* If the geneve device is configured for metadata (or externally
 	 * controlled, for example, OVS), then nothing can be changed.
 	 */