280 	return freelist_dereference(s, object + s->offset);  in get_freepointer()
285 	prefetch(object + s->offset);  in prefetch_freepointer()
296 	freepointer_addr = (unsigned long)object + s->offset;  in get_freepointer_safe()
303 	unsigned long freeptr_addr = (unsigned long)object + s->offset;  in set_freepointer()
541 	if (s->offset)  in get_track()
542 		p = object + s->offset + sizeof(void *);  in get_track()
671 	if (s->offset)  in print_trailer()
672 		off = s->offset + sizeof(void *);  in print_trailer()
801 	if (s->offset)  in check_pad_bytes()
889 	if (!s->offset && val == SLUB_RED_ACTIVE)  in check_object()
2661 		memset((void *)((char *)obj + s->offset), 0, sizeof(void *));  in maybe_wipe_obj_freeptr()
3543 		s->offset = size;  in calculate_sizes()
3629 			s->offset = 0;  in kmem_cache_open()
3870 	unsigned int offset;  in __check_heap_object()  local
3884 	offset = (ptr - page_address(page)) % s->size;  in __check_heap_object()
3888 		if (offset < s->red_left_pad)  in __check_heap_object()
3890 				       s->name, to_user, offset, n);  in __check_heap_object()
3891 		offset -= s->red_left_pad;  in __check_heap_object()
3895 	if (offset >= s->useroffset &&  in __check_heap_object()
3896 	    offset - s->useroffset <= s->usersize &&  in __check_heap_object()
3897 	    n <= s->useroffset - offset + s->usersize)  in __check_heap_object()
3908 	    offset <= object_size && n <= object_size - offset) {  in __check_heap_object()
3909 		usercopy_warn("SLUB object", s->name, to_user, offset, n);  in __check_heap_object()
3913 	usercopy_abort("SLUB object", s->name, to_user, offset, n);  in __check_heap_object()