695 	rep.th.doff   = sizeof(struct tcphdr) / 4;  in tcp_v4_send_reset()
703 				       skb->len - (th->doff << 2));  in tcp_v4_send_reset()
768 		rep.th.doff = arg.iov[0].iov_len / 4;  in tcp_v4_send_reset()
863 	rep.th.doff    = arg.iov[0].iov_len / 4;  in tcp_v4_send_ack()
878 		rep.th.doff = arg.iov[0].iov_len/4;  in tcp_v4_send_ack()
1317 	if (tcp_v4_md5_hash_headers(hp, daddr, saddr, th, th->doff << 2))  in tcp_v4_md5_hash_hdr()
1363 	if (tcp_md5_hash_skb_data(hp, skb, th->doff << 2))  in tcp_v4_md5_hash_skb()
1750 	if (th->doff < sizeof(struct tcphdr) / 4)  in tcp_v4_early_demux()
1808 	hdrlen = th->doff * 4;  in tcp_add_backlog()
1827 	    thtail->doff != th->doff ||  in tcp_add_backlog()
1900 	return sk_filter_trim_cap(sk, skb, th->doff * 4);  in tcp_filter()
1922 				    skb->len - th->doff * 4);  in tcp_v4_fill_cb()
1959 	if (unlikely(th->doff < sizeof(struct tcphdr) / 4))  in tcp_v4_rcv()
1961 	if (!pskb_may_pull(skb, th->doff * 4))  in tcp_v4_rcv()