AArch64 LBNExpNExp+ExpNExp2-BIS-3 TTHM=HA HD { pte_x=(db:0,dbm:1); 0:X3=x; 1:X6=pte_x; 1:X4=(oa:phy_x,valid :0); x=1; int y; } P0 | P1 ; MOV W4,#2 | LDR X5,[X6]; L0:STR W4,[X3] | STR X4,[X6]; exists (1:X5=(oa:PA(x), dbm:1) /\ [PTE(x)]=(oa:PA(x), valid:0) /\ [x]=1 /\ fault(P0:L0,x))