AArch64 NT-06-af Variant=precise TTHM=P0:HA { pte_x=(af:0); 0:X2=x; 0:X4=y; 1:X2=x; 1:X4=y; } P0 | P1 ; MOV W0,#2 | LDR W0,[X4] ; STR W0,[X2] | DMB LD ; DMB ST | MOV W1,#1 ; MOV W1,#1 |L0: ; STR W1,[X4] | STR W1,[X2] ; exists (1:X0=1 /\ [x]=2 /\ fault(P1:L0,x,MMU:AccessFlag))