vm_fault: Move nera into faultstate
This makes it easier to factor out pieces of vm_fault(). No functional
change intended.
Obtained from: jeff (object_concurrency patches)
Reviewed by: kib
(cherry picked from commit 45c09a74d681cfcad0a556b753cd56f6084ace46)