runtime: fix offset in invalidptr panic message

Change-Id: I00e1eebbf5e1a01c8fad5ca5324aa8eec1e4d731
Reviewed-on: https://go-review.googlesource.com/14792
Reviewed-by: Rick Hudson <rlh@golang.org>
diff --git a/src/runtime/mbitmap.go b/src/runtime/mbitmap.go
index 6998b14..e7319c1 100644
--- a/src/runtime/mbitmap.go
+++ b/src/runtime/mbitmap.go
@@ -225,7 +225,7 @@
 			}
 			print("idx=", hex(idx), " span.start=", hex(s.start<<_PageShift), " span.limit=", hex(s.limit), " span.state=", s.state, "\n")
 			if refBase != 0 {
-				print("runtime: found in object at *(", hex(refBase), "+", hex(off), ")\n")
+				print("runtime: found in object at *(", hex(refBase), "+", hex(refOff), ")\n")
 				gcDumpObject("object", refBase, refOff)
 			}
 			throw("found bad pointer in Go heap (incorrect use of unsafe or cgo?)")