target/arm: Timer _EL02 registers UNDEF for E2H == 0