RDRAND always returning all-FF is exactly the kind of thing that's an obvious bug, not a plausible-but-wrong result.