---

yaml
---
r: 350083
b: refs/heads/master
c: 06b7bcd
h: refs/heads/master
i:
  350081: 423ea45
  350079: d406930
v: v3

[refs]

@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 441f1eb7db8babe2b6b4bc805f023739dbb70e33
+refs/heads/master: 06b7bcd8cbd7eb1af331e437ec3d8f5182ae1b7e

trunk/kernel/events/uprobes.c

@@ -669,16 +669,24 @@ remove_breakpoint(struct uprobe *uprobe, struct mm_struct *mm, unsigned long vad
 	return set_orig_insn(&uprobe->arch, mm, vaddr);
 }
 
+static inline bool uprobe_is_active(struct uprobe *uprobe)
+{
+	return !RB_EMPTY_NODE(&uprobe->rb_node);
+}
 /*
  * There could be threads that have already hit the breakpoint. They
  * will recheck the current insn and restart if find_uprobe() fails.
  * See find_active_uprobe().
  */
 static void delete_uprobe(struct uprobe *uprobe)
 {
+	if (WARN_ON(!uprobe_is_active(uprobe)))
+		return;
+
 	spin_lock(&uprobes_treelock);
 	rb_erase(&uprobe->rb_node, &uprobes_tree);
 	spin_unlock(&uprobes_treelock);
+	RB_CLEAR_NODE(&uprobe->rb_node); /* for uprobe_is_active() */
 	iput(uprobe->inode);
 	put_uprobe(uprobe);
 }