3.6-stable review patch.  If anyone has any objections, please let me know.

------------------

From: Henrik Rydberg <redacted>

commit 014639003c77a51fc319c9fdf225e7747cb6e18d upstream.

The handling of large output bulk transfers is broken; the same user
page is read over and over again. Fixed with this patch.

Acked-by: Peter Stuge <redacted>
Acked-by: Hans de Goede <redacted>
Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Henrik Rydberg <redacted>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

---
 drivers/usb/core/devio.c |    1 +
 1 file changed, 1 insertion(+)

--- a/drivers/usb/core/devio.c
+++ b/drivers/usb/core/devio.c

@@ -1348,6 +1348,7 @@ static int proc_do_submiturb(struct dev_
 					ret = -EFAULT;
 					goto error;
 				}
+				uurb->buffer += u;
 			}
 			totlen -= u;
 		}