target/i386: fix fbstp handling of out-of-range values