x86-64: page faults from user mode are always user faults

Randy Dunlap noticed an interesting "crashme" behaviour on his dual
Prescott Xeon setup, where he gets page faults with the error code
having a zero "user" bit, but the register state points back to user
mode.

This may be a CPU microcode buglet triggered by some strange instruction
pattern that crashme generates, and loading a microcode update seems to
possibly have fixed it.

Regardless, we really should trust the register state more than the
error code, since it's really the register state that determines whether
we can actually send a signal, or whether we're in kernel mode and need
to oops/kill the process in the case of a page fault.

Cc: Randy Dunlap <rdunlap@xenotime.net>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

+7
+7
arch/x86_64/mm/fault.c
··· 374 if (unlikely(in_atomic() || !mm)) 375 goto bad_area_nosemaphore; 376 377 again: 378 /* When running in the kernel we expect faults to occur only to 379 * addresses in user space. All other faults represent errors in the
··· 374 if (unlikely(in_atomic() || !mm)) 375 goto bad_area_nosemaphore; 376 377 + /* 378 + * User-mode registers count as a user access even for any 379 + * potential system fault or CPU buglet. 380 + */ 381 + if (user_mode_vm(regs)) 382 + error_code |= PF_USER; 383 + 384 again: 385 /* When running in the kernel we expect faults to occur only to 386 * addresses in user space. All other faults represent errors in the