Patrick McHardy a écrit :

Indeed, but unregister_vlan_dev() destroys the group once the
count has reached zero, so we must not access it after that.

Well, I hoped call_rcu() callback doesnt fire and kfree(grp) until we exited
from unregister_vlan_dev_alls(), with RTNL locked...