target-i386: fix kernel accesses with SMAP and CPL = 3