Former rollback will now cancel later rollback correctly

* Compatible to dual-core

It used to be changed only when hit

Instead of using io.req.bits as a index to search in valid array, we use
s1_addr register to keep the valid read from valid register array.