I find that the verification of encoding of the poll instruction in this blob is not correct.
The code loads the instruction and checks for three bit fields, but it uses wrong masks. This
won't trigger an assertion failure as the masks are partial compared with the correct ones.