• Sukadev Bhattiprolu's avatar
    ibmvnic: fix a race between open and reset · 8f1c0fd2
    Sukadev Bhattiprolu authored
    __ibmvnic_reset() currently reads the adapter->state before getting the
    rtnl and saves that state as the "target state" for the reset. If this
    read occurs when adapter is in PROBED state, the target state would be
    PROBED.
    
    Just after the target state is saved, and before the actual reset process
    is started (i.e before rtnl is acquired) if we get an ibmvnic_open() call
    we would move the adapter to OPEN state.
    
    But when the reset is processed (after ibmvnic_open()) drops the rtnl),
    it will leave the adapter in PROBED state even though we already moved
    it to OPEN.
    
    To fix this, use the RTNL to improve serialization when reading/updating
    the adapter state. i.e determine the target state of a reset only after
    getting the RTNL. And if a reset is in progress during an open, simply
    set the target state of the adapter and let the reset code finish the
    open (like we currently do if failover is pending).
    
    One twist to this serialization is if the adapter state changes when we
    drop the RTNL to update the link state. Account for this by checking if
    there was an intervening open and update the target state for the reset
    accordingly (see new comments in the code). Note that only the reset
    functions and ibmvnic_open() can set the adapter to OPEN state and this
    must happen under rtnl.
    
    Fixes: 7d7195a0 ("ibmvnic: Do not process device remove during device reset")
    Signed-off-by: default avatarSukadev Bhattiprolu <sukadev@linux.ibm.com>
    Reviewed-by: default avatarDany Madden <drt@linux.ibm.com>
    Link: https://lore.kernel.org/r/20210224050229.1155468-1-sukadev@linux.ibm.comSigned-off-by: default avatarJakub Kicinski <kuba@kernel.org>
    8f1c0fd2
ibmvnic.c 150 KB