scsi: core: Restrict legal sdev_state transitions via sysfs
authorUday Shankar <ushankar@purestorage.com>
Sat, 24 Sep 2022 00:02:42 +0000 (18:02 -0600)
committerMartin K. Petersen <martin.petersen@oracle.com>
Tue, 18 Oct 2022 02:26:29 +0000 (02:26 +0000)
commit2331ce6126be8864b39490e705286b66e2344aac
tree2622c427146c4e2d39fa3425884aaa447ad843c8
parent9abf2313adc1ca1b6180c508c25f22f9395cc780
scsi: core: Restrict legal sdev_state transitions via sysfs

Userspace can currently write to sysfs to transition sdev_state to RUNNING
or OFFLINE from any source state. This causes issues because proper
transitioning out of some states involves steps besides just changing
sdev_state, so allowing userspace to change sdev_state regardless of the
source state can result in inconsistencies; e.g. with ISCSI we can end up
with sdev_state == SDEV_RUNNING while the device queue is quiesced. Any
task attempting I/O on the device will then hang, and in more recent
kernels, iscsid will hang as well.

More detail about this bug is provided in my first attempt:

https://groups.google.com/g/open-iscsi/c/PNKca4HgPDs/m/CXaDkntOAQAJ

Link: https://lore.kernel.org/r/20220924000241.2967323-1-ushankar@purestorage.com
Signed-off-by: Uday Shankar <ushankar@purestorage.com>
Suggested-by: Mike Christie <michael.christie@oracle.com>
Reviewed-by: Hannes Reinecke <hare@suse.de>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
drivers/scsi/scsi_sysfs.c