Writing to TTBCR on ARM9 causes fault