fix ring3 stack bug
use sysexit to jump to ring3