Home | History | Annotate | Line # | Download | only in rumpvfs
rumpblk.c revision 1.31
      1 /*	$NetBSD: rumpblk.c,v 1.31 2009/11/20 17:48:52 pooka Exp $	*/
      2 
      3 /*
      4  * Copyright (c) 2009 Antti Kantee.  All Rights Reserved.
      5  *
      6  * Development of this software was supported by the
      7  * Finnish Cultural Foundation.
      8  *
      9  * Redistribution and use in source and binary forms, with or without
     10  * modification, are permitted provided that the following conditions
     11  * are met:
     12  * 1. Redistributions of source code must retain the above copyright
     13  *    notice, this list of conditions and the following disclaimer.
     14  * 2. Redistributions in binary form must reproduce the above copyright
     15  *    notice, this list of conditions and the following disclaimer in the
     16  *    documentation and/or other materials provided with the distribution.
     17  *
     18  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS
     19  * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
     20  * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
     21  * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
     22  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     23  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
     24  * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     25  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     26  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     27  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     28  * SUCH DAMAGE.
     29  */
     30 
     31 /*
     32  * Block device emulation.  Presents a block device interface and
     33  * uses rumpuser system calls to satisfy I/O requests.
     34  *
     35  * We provide fault injection.  The driver can be made to fail
     36  * I/O occasionally.
     37  *
     38  * The driver also provides an optimization for regular files by
     39  * using memory-mapped I/O.  This avoids kernel access for every
     40  * I/O operation.  It also gives finer-grained control of how to
     41  * flush data.  Additionally, in case the rump kernel dumps core,
     42  * we get way less carnage.
     43  *
     44  * However, it is quite costly in writing large amounts of
     45  * file data, since old contents cannot merely be overwritten, but
     46  * must be paged in first before replacing (i.e. r/m/w).  Ideally,
     47  * we should use directio.  The problem is that directio can fail
     48  * silently causing improper file system semantics (i.e. unflushed
     49  * data).  Therefore, default to mmap for now.  Even so, directio
     50  * _should_ be safe and can be enabled by compiling this module
     51  * with -DHAS_DIRECTIO.
     52  */
     53 
     54 #include <sys/cdefs.h>
     55 __KERNEL_RCSID(0, "$NetBSD: rumpblk.c,v 1.31 2009/11/20 17:48:52 pooka Exp $");
     56 
     57 #include <sys/param.h>
     58 #include <sys/buf.h>
     59 #include <sys/conf.h>
     60 #include <sys/condvar.h>
     61 #include <sys/disklabel.h>
     62 #include <sys/evcnt.h>
     63 #include <sys/fcntl.h>
     64 #include <sys/kmem.h>
     65 #include <sys/malloc.h>
     66 #include <sys/queue.h>
     67 #include <sys/stat.h>
     68 
     69 #include <rump/rumpuser.h>
     70 
     71 #include "rump_private.h"
     72 #include "rump_vfs_private.h"
     73 
     74 #if 0
     75 #define DPRINTF(x) printf x
     76 #else
     77 #define DPRINTF(x)
     78 #endif
     79 
     80 /* Default: 16 x 1MB windows */
     81 unsigned memwinsize = (1<<20);
     82 unsigned memwincnt = 16;
     83 
     84 #define STARTWIN(off)		((off) & ~(memwinsize-1))
     85 #define INWIN(win,off)		((win)->win_off == STARTWIN(off))
     86 #define WINSIZE(rblk, win)	(MIN((rblk->rblk_size-win->win_off),memwinsize))
     87 #define WINVALID(win)		((win)->win_off != (off_t)-1)
     88 #define WINVALIDATE(win)	((win)->win_off = (off_t)-1)
     89 struct blkwin {
     90 	off_t win_off;
     91 	void *win_mem;
     92 	int win_refcnt;
     93 
     94 	TAILQ_ENTRY(blkwin) win_lru;
     95 };
     96 
     97 #define RUMPBLK_SIZE 16
     98 static struct rblkdev {
     99 	char *rblk_path;
    100 	int rblk_fd;
    101 	int rblk_opencnt;
    102 #ifdef HAS_ODIRECT
    103 	int rblk_dfd;
    104 #endif
    105 	uint64_t rblk_size;
    106 	uint64_t rblk_hostoffset;
    107 	int rblk_ftype;
    108 
    109 	/* for mmap */
    110 	int rblk_mmflags;
    111 	kmutex_t rblk_memmtx;
    112 	kcondvar_t rblk_memcv;
    113 	TAILQ_HEAD(winlru, blkwin) rblk_lruq;
    114 	bool rblk_waiting;
    115 
    116 	struct disklabel rblk_label;
    117 } minors[RUMPBLK_SIZE];
    118 
    119 static struct evcnt ev_io_total;
    120 static struct evcnt ev_io_async;
    121 
    122 static struct evcnt ev_memblk_hits;
    123 static struct evcnt ev_memblk_busy;
    124 
    125 static struct evcnt ev_bwrite_total;
    126 static struct evcnt ev_bwrite_async;
    127 static struct evcnt ev_bread_total;
    128 
    129 dev_type_open(rumpblk_open);
    130 dev_type_close(rumpblk_close);
    131 dev_type_read(rumpblk_read);
    132 dev_type_write(rumpblk_write);
    133 dev_type_ioctl(rumpblk_ioctl);
    134 dev_type_strategy(rumpblk_strategy);
    135 dev_type_strategy(rumpblk_strategy_fail);
    136 dev_type_dump(rumpblk_dump);
    137 dev_type_size(rumpblk_size);
    138 
    139 static const struct bdevsw rumpblk_bdevsw = {
    140 	rumpblk_open, rumpblk_close, rumpblk_strategy, rumpblk_ioctl,
    141 	nodump, nosize, D_DISK
    142 };
    143 
    144 static const struct bdevsw rumpblk_bdevsw_fail = {
    145 	rumpblk_open, rumpblk_close, rumpblk_strategy_fail, rumpblk_ioctl,
    146 	nodump, nosize, D_DISK
    147 };
    148 
    149 static const struct cdevsw rumpblk_cdevsw = {
    150 	rumpblk_open, rumpblk_close, rumpblk_read, rumpblk_write,
    151 	rumpblk_ioctl, nostop, notty, nopoll, nommap, nokqfilter, D_DISK
    152 };
    153 
    154 /* fail every n out of BLKFAIL_MAX */
    155 #define BLKFAIL_MAX 10000
    156 static int blkfail;
    157 static unsigned randstate;
    158 static kmutex_t rumpblk_lock;
    159 
    160 static void
    161 makedefaultlabel(struct disklabel *lp, off_t size, int part)
    162 {
    163 	int i;
    164 
    165 	memset(lp, 0, sizeof(*lp));
    166 
    167 	lp->d_secperunit = size;
    168 	lp->d_secsize = DEV_BSIZE;
    169 	lp->d_nsectors = size >> DEV_BSHIFT;
    170 	lp->d_ntracks = 1;
    171 	lp->d_ncylinders = 1;
    172 	lp->d_secpercyl = lp->d_nsectors;
    173 
    174 	/* oh dear oh dear */
    175 	strncpy(lp->d_typename, "rumpd", sizeof(lp->d_typename));
    176 	strncpy(lp->d_packname, "fictitious", sizeof(lp->d_packname));
    177 
    178 	lp->d_type = DTYPE_RUMPD;
    179 	lp->d_rpm = 11;
    180 	lp->d_interleave = 1;
    181 	lp->d_flags = 0;
    182 
    183 	/* XXX: RAW_PART handling? */
    184 	for (i = 0; i < part; i++) {
    185 		lp->d_partitions[i].p_fstype = FS_UNUSED;
    186 	}
    187 	lp->d_partitions[part].p_size = size;
    188 	lp->d_npartitions = part+1;
    189 	/* XXX: file system type? */
    190 
    191 	lp->d_magic = DISKMAGIC;
    192 	lp->d_magic2 = DISKMAGIC;
    193 	lp->d_checksum = 0; /* XXX */
    194 }
    195 
    196 static struct blkwin *
    197 getwindow(struct rblkdev *rblk, off_t off, int *wsize, int *error)
    198 {
    199 	struct blkwin *win;
    200 
    201 	mutex_enter(&rblk->rblk_memmtx);
    202  retry:
    203 	/* search for window */
    204 	TAILQ_FOREACH(win, &rblk->rblk_lruq, win_lru) {
    205 		if (INWIN(win, off) && WINVALID(win))
    206 			break;
    207 	}
    208 
    209 	/* found?  return */
    210 	if (win) {
    211 		ev_memblk_hits.ev_count++;
    212 		TAILQ_REMOVE(&rblk->rblk_lruq, win, win_lru);
    213 		goto good;
    214 	}
    215 
    216 	/*
    217 	 * Else, create new window.  If the least recently used is not
    218 	 * currently in use, reuse that.  Otherwise we need to wait.
    219 	 */
    220 	win = TAILQ_LAST(&rblk->rblk_lruq, winlru);
    221 	if (win->win_refcnt == 0) {
    222 		TAILQ_REMOVE(&rblk->rblk_lruq, win, win_lru);
    223 		mutex_exit(&rblk->rblk_memmtx);
    224 
    225 		if (WINVALID(win)) {
    226 			DPRINTF(("win %p, unmap mem %p, off 0x%" PRIx64 "\n",
    227 			    win, win->win_mem, win->win_off));
    228 			rumpuser_unmap(win->win_mem, WINSIZE(rblk, win));
    229 			WINVALIDATE(win);
    230 		}
    231 
    232 		win->win_off = STARTWIN(off);
    233 		win->win_mem = rumpuser_filemmap(rblk->rblk_fd, win->win_off,
    234 		    WINSIZE(rblk, win), rblk->rblk_mmflags, error);
    235 		DPRINTF(("win %p, off 0x%" PRIx64 ", mem %p\n",
    236 		    win, win->win_off, win->win_mem));
    237 
    238 		mutex_enter(&rblk->rblk_memmtx);
    239 		if (win->win_mem == NULL) {
    240 			WINVALIDATE(win);
    241 			TAILQ_INSERT_TAIL(&rblk->rblk_lruq, win, win_lru);
    242 			mutex_exit(&rblk->rblk_memmtx);
    243 			return NULL;
    244 		}
    245 	} else {
    246 		DPRINTF(("memwin wait\n"));
    247 		ev_memblk_busy.ev_count++;
    248 
    249 		rblk->rblk_waiting = true;
    250 		cv_wait(&rblk->rblk_memcv, &rblk->rblk_memmtx);
    251 		goto retry;
    252 	}
    253 
    254  good:
    255 	KASSERT(win);
    256 	win->win_refcnt++;
    257 	TAILQ_INSERT_HEAD(&rblk->rblk_lruq, win, win_lru);
    258 	mutex_exit(&rblk->rblk_memmtx);
    259 	*wsize = MIN(*wsize, memwinsize - (off-win->win_off));
    260 	KASSERT(*wsize);
    261 
    262 	return win;
    263 }
    264 
    265 static void
    266 putwindow(struct rblkdev *rblk, struct blkwin *win)
    267 {
    268 
    269 	mutex_enter(&rblk->rblk_memmtx);
    270 	if (--win->win_refcnt == 0 && rblk->rblk_waiting) {
    271 		rblk->rblk_waiting = false;
    272 		cv_signal(&rblk->rblk_memcv);
    273 	}
    274 	KASSERT(win->win_refcnt >= 0);
    275 	mutex_exit(&rblk->rblk_memmtx);
    276 }
    277 
    278 static void
    279 wincleanup(struct rblkdev *rblk)
    280 {
    281 	struct blkwin *win;
    282 
    283 	while ((win = TAILQ_FIRST(&rblk->rblk_lruq)) != NULL) {
    284 		TAILQ_REMOVE(&rblk->rblk_lruq, win, win_lru);
    285 		if (WINVALID(win)) {
    286 			DPRINTF(("cleanup win %p addr %p\n",
    287 			    win, win->win_mem));
    288 			rumpuser_unmap(win->win_mem, WINSIZE(rblk, win));
    289 		}
    290 		kmem_free(win, sizeof(*win));
    291 	}
    292 	rblk->rblk_mmflags = 0;
    293 }
    294 
    295 int
    296 rumpblk_init(void)
    297 {
    298 	char buf[64];
    299 	int rumpblk = RUMPBLK;
    300 	unsigned tmp;
    301 	int error, i;
    302 
    303 	mutex_init(&rumpblk_lock, MUTEX_DEFAULT, IPL_NONE);
    304 
    305 	if (rumpuser_getenv("RUMP_BLKFAIL", buf, sizeof(buf), &error) == 0) {
    306 		blkfail = strtoul(buf, NULL, 10);
    307 		/* fail everything */
    308 		if (blkfail > BLKFAIL_MAX)
    309 			blkfail = BLKFAIL_MAX;
    310 		if (rumpuser_getenv("RUMP_BLKFAIL_SEED", buf, sizeof(buf),
    311 		    &error) == 0) {
    312 			randstate = strtoul(buf, NULL, 10);
    313 		} else {
    314 			randstate = arc4random();
    315 		}
    316 		printf("rumpblk: FAULT INJECTION ACTIVE! fail %d/%d. "
    317 		    "seed %u\n", blkfail, BLKFAIL_MAX, randstate);
    318 	} else {
    319 		blkfail = 0;
    320 	}
    321 
    322 	if (rumpuser_getenv("RUMP_BLKWINSIZE", buf, sizeof(buf), &error) == 0) {
    323 		printf("rumpblk: ");
    324 		tmp = strtoul(buf, NULL, 10);
    325 		if (tmp && !(tmp & (tmp-1)))
    326 			memwinsize = tmp;
    327 		else
    328 			printf("invalid RUMP_BLKWINSIZE %d, ", tmp);
    329 		printf("using %d for memwinsize\n", memwinsize);
    330 	}
    331 	if (rumpuser_getenv("RUMP_BLKWINCOUNT", buf, sizeof(buf), &error) == 0){
    332 		printf("rumpblk: ");
    333 		tmp = strtoul(buf, NULL, 10);
    334 		if (tmp)
    335 			memwincnt = tmp;
    336 		else
    337 			printf("invalid RUMP_BLKWINCOUNT %d, ", tmp);
    338 		printf("using %d for memwincount\n", memwincnt);
    339 	}
    340 
    341 	memset(minors, 0, sizeof(minors));
    342 	for (i = 0; i < RUMPBLK_SIZE; i++) {
    343 		mutex_init(&minors[i].rblk_memmtx, MUTEX_DEFAULT, IPL_NONE);
    344 		cv_init(&minors[i].rblk_memcv, "rblkmcv");
    345 	}
    346 
    347 	evcnt_attach_dynamic(&ev_io_total, EVCNT_TYPE_MISC, NULL,
    348 	    "rumpblk", "rumpblk I/O reqs");
    349 	evcnt_attach_dynamic(&ev_io_async, EVCNT_TYPE_MISC, NULL,
    350 	    "rumpblk", "rumpblk async I/O");
    351 
    352 	evcnt_attach_dynamic(&ev_bread_total, EVCNT_TYPE_MISC, NULL,
    353 	    "rumpblk", "rumpblk bytes read");
    354 	evcnt_attach_dynamic(&ev_bwrite_total, EVCNT_TYPE_MISC, NULL,
    355 	    "rumpblk", "rumpblk bytes written");
    356 	evcnt_attach_dynamic(&ev_bwrite_async, EVCNT_TYPE_MISC, NULL,
    357 	    "rumpblk", "rumpblk bytes written async");
    358 
    359 	evcnt_attach_dynamic(&ev_memblk_hits, EVCNT_TYPE_MISC, NULL,
    360 	    "rumpblk", "memblk window hits");
    361 	evcnt_attach_dynamic(&ev_memblk_busy, EVCNT_TYPE_MISC, NULL,
    362 	    "rumpblk", "memblk all windows busy");
    363 
    364 	if (blkfail) {
    365 		return devsw_attach("rumpblk", &rumpblk_bdevsw_fail, &rumpblk,
    366 		    &rumpblk_cdevsw, &rumpblk);
    367 	} else {
    368 		return devsw_attach("rumpblk", &rumpblk_bdevsw, &rumpblk,
    369 		    &rumpblk_cdevsw, &rumpblk);
    370 	}
    371 }
    372 
    373 /* XXX: no deregister */
    374 int
    375 rumpblk_register(const char *path, devminor_t *dmin,
    376 	uint64_t offset, uint64_t size)
    377 {
    378 	struct rblkdev *rblk;
    379 	uint64_t flen;
    380 	size_t len;
    381 	int ftype, error, i;
    382 
    383 	/* devices might not report correct size unless they're open */
    384 	if (rumpuser_getfileinfo(path, &flen, &ftype, &error) == -1)
    385 		return error;
    386 
    387 	/* verify host file is of supported type */
    388 	if (!(ftype == RUMPUSER_FT_REG
    389 	   || ftype == RUMPUSER_FT_BLK
    390 	   || ftype == RUMPUSER_FT_CHR))
    391 		return EINVAL;
    392 
    393 	mutex_enter(&rumpblk_lock);
    394 	for (i = 0; i < RUMPBLK_SIZE; i++) {
    395 		if (minors[i].rblk_path&&strcmp(minors[i].rblk_path, path)==0) {
    396 			mutex_exit(&rumpblk_lock);
    397 			*dmin = i;
    398 			return 0;
    399 		}
    400 	}
    401 
    402 	for (i = 0; i < RUMPBLK_SIZE; i++)
    403 		if (minors[i].rblk_path == NULL)
    404 			break;
    405 	if (i == RUMPBLK_SIZE) {
    406 		mutex_exit(&rumpblk_lock);
    407 		return EBUSY;
    408 	}
    409 
    410 	rblk = &minors[i];
    411 	len = strlen(path);
    412 	rblk->rblk_path = malloc(len + 1, M_TEMP, M_WAITOK);
    413 	strcpy(rblk->rblk_path, path);
    414 	rblk->rblk_fd = -1;
    415 	rblk->rblk_hostoffset = offset;
    416 	if (size == RUMPBLK_SIZENOTSET) {
    417 		KASSERT(size + offset <= flen);
    418 		rblk->rblk_size = size;
    419 	} else {
    420 		KASSERT(offset < flen);
    421 		rblk->rblk_size = flen - offset;
    422 	}
    423 	rblk->rblk_ftype = ftype;
    424 	makedefaultlabel(&rblk->rblk_label, rblk->rblk_size, i);
    425 	mutex_exit(&rumpblk_lock);
    426 
    427 	*dmin = i;
    428 	return 0;
    429 }
    430 
    431 int
    432 rumpblk_open(dev_t dev, int flag, int fmt, struct lwp *l)
    433 {
    434 	struct rblkdev *rblk = &minors[minor(dev)];
    435 	int error, fd;
    436 
    437 	if (rblk->rblk_path == NULL)
    438 		return ENXIO;
    439 
    440 	if (rblk->rblk_fd != -1)
    441 		return 0; /* XXX: refcount, open mode */
    442 	fd = rumpuser_open(rblk->rblk_path, OFLAGS(flag), &error);
    443 	if (error)
    444 		return error;
    445 
    446 #ifdef HAS_ODIRECT
    447 	rblk->rblk_dfd = rumpuser_open(rblk->rblk_path,
    448 	    OFLAGS(flag) | O_DIRECT, &error);
    449 	if (error)
    450 		return error;
    451 #endif
    452 
    453 	if (rblk->rblk_ftype == RUMPUSER_FT_REG) {
    454 		uint64_t fsize = rblk->rblk_size, off = rblk->rblk_hostoffset;
    455 		struct blkwin *win;
    456 		int i, winsize;
    457 
    458 		/*
    459 		 * Use mmap to access a regular file.  Allocate and
    460 		 * cache initial windows here.  Failure to allocate one
    461 		 * means fallback to read/write i/o.
    462 		 */
    463 
    464 		rblk->rblk_mmflags = 0;
    465 		if (flag & FREAD)
    466 			rblk->rblk_mmflags |= RUMPUSER_FILEMMAP_READ;
    467 		if (flag & FWRITE) {
    468 			rblk->rblk_mmflags |= RUMPUSER_FILEMMAP_WRITE;
    469 			rblk->rblk_mmflags |= RUMPUSER_FILEMMAP_SHARED;
    470 		}
    471 
    472 		TAILQ_INIT(&rblk->rblk_lruq);
    473 		rblk->rblk_fd = fd;
    474 
    475 		for (i = 0; i < memwincnt && off + i*memwinsize < fsize; i++) {
    476 			win = kmem_zalloc(sizeof(*win), KM_SLEEP);
    477 			WINVALIDATE(win);
    478 			TAILQ_INSERT_TAIL(&rblk->rblk_lruq, win, win_lru);
    479 
    480 			/*
    481 			 * Allocate first windows.  Here we just generally
    482 			 * make sure a) we can mmap at all b) we have the
    483 			 * necessary VA available
    484 			 */
    485 			winsize = memwinsize;
    486 			win = getwindow(rblk, off + i*memwinsize, &winsize,
    487 			    &error);
    488 			if (win) {
    489 				putwindow(rblk, win);
    490 			} else {
    491 				wincleanup(rblk);
    492 				break;
    493 			}
    494 		}
    495 	}
    496 
    497 	KASSERT(rblk->rblk_fd != -1);
    498 	return 0;
    499 }
    500 
    501 int
    502 rumpblk_close(dev_t dev, int flag, int fmt, struct lwp *l)
    503 {
    504 	struct rblkdev *rblk = &minors[minor(dev)];
    505 	int dummy;
    506 
    507 	if (rblk->rblk_mmflags)
    508 		wincleanup(rblk);
    509 	rumpuser_fsync(rblk->rblk_fd, &dummy);
    510 	rumpuser_close(rblk->rblk_fd, &dummy);
    511 	rblk->rblk_fd = -1;
    512 
    513 	return 0;
    514 }
    515 
    516 int
    517 rumpblk_ioctl(dev_t dev, u_long xfer, void *addr, int flag, struct lwp *l)
    518 {
    519 	devminor_t dmin = minor(dev);
    520 	struct rblkdev *rblk = &minors[dmin];
    521 	struct partinfo *pi;
    522 	int error = 0;
    523 
    524 	/* well, me should support a few more, but we don't for now */
    525 	switch (xfer) {
    526 	case DIOCGDINFO:
    527 		*(struct disklabel *)addr = rblk->rblk_label;
    528 		break;
    529 
    530 	case DIOCGPART:
    531 		pi = addr;
    532 		pi->part = &rblk->rblk_label.d_partitions[DISKPART(dmin)];
    533 		pi->disklab = &rblk->rblk_label;
    534 		break;
    535 	default:
    536 		error = ENOTTY;
    537 		break;
    538 	}
    539 
    540 	return error;
    541 }
    542 
    543 static int
    544 do_physio(dev_t dev, struct uio *uio, int which)
    545 {
    546 	void (*strat)(struct buf *);
    547 
    548 	if (blkfail)
    549 		strat = rumpblk_strategy_fail;
    550 	else
    551 		strat = rumpblk_strategy;
    552 
    553 	return physio(strat, NULL, dev, which, minphys, uio);
    554 }
    555 
    556 int
    557 rumpblk_read(dev_t dev, struct uio *uio, int flags)
    558 {
    559 
    560 	return do_physio(dev, uio, B_READ);
    561 }
    562 
    563 int
    564 rumpblk_write(dev_t dev, struct uio *uio, int flags)
    565 {
    566 
    567 	return do_physio(dev, uio, B_WRITE);
    568 }
    569 
    570 static void
    571 dostrategy(struct buf *bp)
    572 {
    573 	struct rblkdev *rblk = &minors[minor(bp->b_dev)];
    574 	off_t off;
    575 	int async = bp->b_flags & B_ASYNC;
    576 	int error;
    577 
    578 	/* collect statistics */
    579 	ev_io_total.ev_count++;
    580 	if (async)
    581 		ev_io_async.ev_count++;
    582 	if (BUF_ISWRITE(bp)) {
    583 		ev_bwrite_total.ev_count += bp->b_bcount;
    584 		if (async)
    585 			ev_bwrite_async.ev_count += bp->b_bcount;
    586 	} else {
    587 		ev_bread_total.ev_count++;
    588 	}
    589 
    590 	off = bp->b_blkno << DEV_BSHIFT;
    591 	off += rblk->rblk_hostoffset;
    592 	/*
    593 	 * Do bounds checking if we're working on a file.  Otherwise
    594 	 * invalid file systems might attempt to read beyond EOF.  This
    595 	 * is bad(tm) especially on mmapped images.  This is essentially
    596 	 * the kernel bounds_check() routines.
    597 	 */
    598 	if (off + bp->b_bcount > rblk->rblk_size) {
    599 		int64_t sz = rblk->rblk_size - off;
    600 
    601 		/* EOF */
    602 		if (sz == 0) {
    603 			rump_biodone(bp, 0, 0);
    604 			return;
    605 		}
    606 		/* beyond EOF ==> error */
    607 		if (sz < 0) {
    608 			rump_biodone(bp, 0, EINVAL);
    609 			return;
    610 		}
    611 
    612 		/* truncate to device size */
    613 		bp->b_bcount = sz;
    614 	}
    615 
    616 	DPRINTF(("rumpblk_strategy: 0x%x bytes %s off 0x%" PRIx64
    617 	    " (0x%" PRIx64 " - 0x%" PRIx64 "), %ssync\n",
    618 	    bp->b_bcount, BUF_ISREAD(bp) ? "READ" : "WRITE",
    619 	    off, off, (off + bp->b_bcount), async ? "a" : ""));
    620 
    621 	/* mmap?  handle here and return */
    622 	if (rblk->rblk_mmflags) {
    623 		struct blkwin *win;
    624 		int winsize, iodone;
    625 		uint8_t *ioaddr, *bufaddr;
    626 
    627 		for (iodone = 0; iodone < bp->b_bcount;
    628 		    iodone += winsize, off += winsize) {
    629 			winsize = bp->b_bcount - iodone;
    630 			win = getwindow(rblk, off, &winsize, &error);
    631 			if (win == NULL) {
    632 				rump_biodone(bp, iodone, error);
    633 				return;
    634 			}
    635 
    636 			ioaddr = (uint8_t *)win->win_mem + (off-STARTWIN(off));
    637 			bufaddr = (uint8_t *)bp->b_data + iodone;
    638 
    639 			DPRINTF(("strat: %p off 0x%" PRIx64
    640 			    ", ioaddr %p (%p)/buf %p\n", win,
    641 			    win->win_off, ioaddr, win->win_mem, bufaddr));
    642 			if (BUF_ISREAD(bp)) {
    643 				memcpy(bufaddr, ioaddr, winsize);
    644 			} else {
    645 				memcpy(ioaddr, bufaddr, winsize);
    646 			}
    647 
    648 			/* synchronous write, sync bits back to disk */
    649 			if (BUF_ISWRITE(bp) && !async) {
    650 				rumpuser_memsync(ioaddr, winsize, &error);
    651 			}
    652 			putwindow(rblk, win);
    653 		}
    654 
    655 		rump_biodone(bp, bp->b_bcount, 0);
    656 		return;
    657 	}
    658 
    659 	/*
    660 	 * Do I/O.  We have different paths for async and sync I/O.
    661 	 * Async I/O is done by passing a request to rumpuser where
    662 	 * it is executed.  The rumpuser routine then calls
    663 	 * biodone() to signal any waiters in the kernel.  I/O's are
    664 	 * executed in series.  Technically executing them in parallel
    665 	 * would produce better results, but then we'd need either
    666 	 * more threads or posix aio.  Maybe worth investigating
    667 	 * this later.
    668 	 *
    669 	 * Using bufq here might be a good idea.
    670 	 */
    671 
    672 	if (rump_threads) {
    673 		struct rumpuser_aio *rua;
    674 		int op, fd;
    675 
    676 		fd = rblk->rblk_fd;
    677 		if (BUF_ISREAD(bp)) {
    678 			op = RUA_OP_READ;
    679 		} else {
    680 			op = RUA_OP_WRITE;
    681 			if (!async) {
    682 				/* O_DIRECT not fully automatic yet */
    683 #ifdef HAS_ODIRECT
    684 				if ((off & (DEV_BSIZE-1)) == 0
    685 				    && ((intptr_t)bp->b_data&(DEV_BSIZE-1)) == 0
    686 				    && (bp->b_bcount & (DEV_BSIZE-1)) == 0)
    687 					fd = rblk->rblk_dfd;
    688 				else
    689 #endif
    690 					op |= RUA_OP_SYNC;
    691 			}
    692 		}
    693 
    694 		rumpuser_mutex_enter(&rumpuser_aio_mtx);
    695 		while ((rumpuser_aio_head+1) % N_AIOS == rumpuser_aio_tail) {
    696 			rumpuser_cv_wait(&rumpuser_aio_cv, &rumpuser_aio_mtx);
    697 		}
    698 
    699 		rua = &rumpuser_aios[rumpuser_aio_head];
    700 		KASSERT(rua->rua_bp == NULL);
    701 		rua->rua_fd = fd;
    702 		rua->rua_data = bp->b_data;
    703 		rua->rua_dlen = bp->b_bcount;
    704 		rua->rua_off = off;
    705 		rua->rua_bp = bp;
    706 		rua->rua_op = op;
    707 
    708 		/* insert into queue & signal */
    709 		rumpuser_aio_head = (rumpuser_aio_head+1) % N_AIOS;
    710 		rumpuser_cv_signal(&rumpuser_aio_cv);
    711 		rumpuser_mutex_exit(&rumpuser_aio_mtx);
    712 	} else {
    713 		if (BUF_ISREAD(bp)) {
    714 			rumpuser_read_bio(rblk->rblk_fd, bp->b_data,
    715 			    bp->b_bcount, off, rump_biodone, bp);
    716 		} else {
    717 			rumpuser_write_bio(rblk->rblk_fd, bp->b_data,
    718 			    bp->b_bcount, off, rump_biodone, bp);
    719 		}
    720 		if (BUF_ISWRITE(bp) && !async)
    721 			rumpuser_fsync(rblk->rblk_fd, &error);
    722 	}
    723 }
    724 
    725 void
    726 rumpblk_strategy(struct buf *bp)
    727 {
    728 
    729 	dostrategy(bp);
    730 }
    731 
    732 /*
    733  * Simple random number generator.  This is private so that we can
    734  * very repeatedly control which blocks will fail.
    735  *
    736  * <mlelstv> pooka, rand()
    737  * <mlelstv> [paste]
    738  */
    739 static unsigned
    740 gimmerand(void)
    741 {
    742 
    743 	return (randstate = randstate * 1103515245 + 12345) % (0x80000000L);
    744 }
    745 
    746 /*
    747  * Block device with very simple fault injection.  Fails every
    748  * n out of BLKFAIL_MAX I/O with EIO.  n is determined by the env
    749  * variable RUMP_BLKFAIL.
    750  */
    751 void
    752 rumpblk_strategy_fail(struct buf *bp)
    753 {
    754 
    755 	if (gimmerand() % BLKFAIL_MAX >= blkfail) {
    756 		dostrategy(bp);
    757 	} else {
    758 		printf("block fault injection: failing I/O on block %lld\n",
    759 		    (long long)bp->b_blkno);
    760 		bp->b_error = EIO;
    761 		biodone(bp);
    762 	}
    763 }
    764