sd_remove calls sd_shutdown to finish I/O to the disc.  However, the
state model puts the device in SDEV_DEL before triggering the
sd_remove (which won't allow any further I/O at all).

Fix by making SDEV_CANCEL the intermediate state and only transitioning to 
SDEV_DEL after calling device_del().