1273 	unsigned int tmo, len1, len2, pipe;  in do_proc_bulk()  local
1286 	len1 = bulk->len;  in do_proc_bulk()
1287 	if (len1 < 0 || len1 >= (INT_MAX - sizeof(struct urb)))  in do_proc_bulk()
1297 	ret = usbfs_increase_memory_usage(len1 + sizeof(struct urb));  in do_proc_bulk()
1306 	tbuf = kmalloc(len1, GFP_KERNEL | __GFP_NOWARN);  in do_proc_bulk()
1316 		usb_fill_int_urb(urb, dev, pipe, tbuf, len1,  in do_proc_bulk()
1319 		usb_fill_bulk_urb(urb, dev, pipe, tbuf, len1, NULL, NULL);  in do_proc_bulk()
1324 		snoop_urb(dev, NULL, pipe, len1, tmo, SUBMIT, NULL, 0);  in do_proc_bulk()
1338 		if (len1) {  in do_proc_bulk()
1339 			if (copy_from_user(tbuf, bulk->data, len1)) {  in do_proc_bulk()
1344 		snoop_urb(dev, NULL, pipe, len1, tmo, SUBMIT, tbuf, len1);  in do_proc_bulk()
1355 	usbfs_decrease_memory_usage(len1 + sizeof(struct urb));  in do_proc_bulk()