ohoh, related to this bug not because the product(AMD ...), is the patch "SHA1 ID: 9ddf1aeb2134e72275c97a2c6ff2e3eb04f2f27a", see comment 4 ~ 6 I find the new bug on Intel CPU, after dump the pagetable of buffer address, proved the root case is the different of set_memory_wc and set_pages_array_wc as describted before.