This was discovered using O_DIRECT at the client side, with small
unaligned file offsets or IOs that span multiple file pages.
Fixes: e248aa7be86 ("svcrdma: Remove max_sge check at connect time")
Signed-off-by: Dan Aloni <dan@kernelim.com>
Signed-off-by: J. Bruce Fields <bfields@redhat.com>
                while (remaining) {
                        len = min_t(u32, PAGE_SIZE - pageoff, remaining);
 
-                       memcpy(dst, page_address(*ppages), len);
+                       memcpy(dst, page_address(*ppages) + pageoff, len);
                        remaining -= len;
                        dst += len;
                        pageoff = 0;
+                       ppages++;
                }
        }