I understand that the SFENCE.VMA/SINVAL.VMA instructions have unspecified behavior if a non-canonical form virtual address is specified and specifically no page fault is expected. I understand similar unspecified behavior applies HFENCE.GVMA if a too wide GPA is specified and no guest page fault is expected.