simulator: fix datacache (and I$) LRU replacement logic