686 	rep.th.doff   = sizeof(struct tcphdr) / 4;  in tcp_v4_send_reset()
694 				       skb->len - (th->doff << 2));  in tcp_v4_send_reset()
744 		rep.th.doff = arg.iov[0].iov_len / 4;  in tcp_v4_send_reset()
839 	rep.th.doff    = arg.iov[0].iov_len / 4;  in tcp_v4_send_ack()
854 		rep.th.doff = arg.iov[0].iov_len/4;  in tcp_v4_send_ack()
1222 	if (tcp_v4_md5_hash_headers(hp, daddr, saddr, th, th->doff << 2))  in tcp_v4_md5_hash_hdr()
1268 	if (tcp_md5_hash_skb_data(hp, skb, th->doff << 2))  in tcp_v4_md5_hash_skb()
1625 	if (th->doff < sizeof(struct tcphdr) / 4)  in tcp_v4_early_demux()
1682 	hdrlen = th->doff * 4;  in tcp_add_backlog()
1707 	    thtail->doff != th->doff ||  in tcp_add_backlog()
1772 	return sk_filter_trim_cap(sk, skb, th->doff * 4);  in tcp_filter()
1794 				    skb->len - th->doff * 4);  in tcp_v4_fill_cb()
1830 	if (unlikely(th->doff < sizeof(struct tcphdr) / 4))  in tcp_v4_rcv()
1832 	if (!pskb_may_pull(skb, th->doff * 4))  in tcp_v4_rcv()