xen/privcmd: return -EFAULT on error