11767 	struct bpf_verifier_state_list *sl;  in clean_live_states()  local
11770 	sl = *explored_state(env, insn);  in clean_live_states()
11771 	while (sl) {  in clean_live_states()
11772 		if (sl->state.branches)  in clean_live_states()
11774 		if (sl->state.insn_idx != insn ||  in clean_live_states()
11775 		    sl->state.curframe != cur->curframe)  in clean_live_states()
11778 			if (sl->state.frame[i]->callsite != cur->frame[i]->callsite)  in clean_live_states()
11780 		clean_verifier_state(env, &sl->state);  in clean_live_states()
11782 		sl = sl->next;  in clean_live_states()
12198 	struct bpf_verifier_state_list *sl, **pprev;  in is_state_visited()  local
12223 	sl = *pprev;  in is_state_visited()
12227 	while (sl) {  in is_state_visited()
12229 		if (sl->state.insn_idx != insn_idx)  in is_state_visited()
12232 		if (sl->state.branches) {  in is_state_visited()
12233 			struct bpf_func_state *frame = sl->state.frame[sl->state.curframe];  in is_state_visited()
12248 			} else if (states_maybe_looping(&sl->state, cur) &&  in is_state_visited()
12249 				   states_equal(env, &sl->state, cur)) {  in is_state_visited()
12271 		if (states_equal(env, &sl->state, cur)) {  in is_state_visited()
12272 			sl->hit_cnt++;  in is_state_visited()
12283 			err = propagate_liveness(env, &sl->state, cur);  in is_state_visited()
12291 			err = err ? : propagate_precision(env, &sl->state);  in is_state_visited()
12304 			sl->miss_cnt++;  in is_state_visited()
12310 		if (sl->miss_cnt > sl->hit_cnt * 3 + 3) {  in is_state_visited()
12314 			*pprev = sl->next;  in is_state_visited()
12315 			if (sl->state.frame[0]->regs[0].live & REG_LIVE_DONE) {  in is_state_visited()
12316 				u32 br = sl->state.branches;  in is_state_visited()
12321 				free_verifier_state(&sl->state, false);  in is_state_visited()
12322 				kfree(sl);  in is_state_visited()
12329 				sl->next = env->free_list;  in is_state_visited()
12330 				env->free_list = sl;  in is_state_visited()
12332 			sl = *pprev;  in is_state_visited()
12336 		pprev = &sl->next;  in is_state_visited()
12337 		sl = *pprev;  in is_state_visited()
14870 	struct bpf_verifier_state_list *sl, *sln;  in free_states()  local
14873 	sl = env->free_list;  in free_states()
14874 	while (sl) {  in free_states()
14875 		sln = sl->next;  in free_states()
14876 		free_verifier_state(&sl->state, false);  in free_states()
14877 		kfree(sl);  in free_states()
14878 		sl = sln;  in free_states()
14886 		sl = env->explored_states[i];  in free_states()
14888 		while (sl) {  in free_states()
14889 			sln = sl->next;  in free_states()
14890 			free_verifier_state(&sl->state, false);  in free_states()
14891 			kfree(sl);  in free_states()
14892 			sl = sln;  in free_states()