kernel/vfio: how userspace access the device