diff --git a/qemu/target/arm/cpu64.c b/qemu/target/arm/cpu64.c
index e8a0528f..2a967d35 100644
--- a/qemu/target/arm/cpu64.c
+++ b/qemu/target/arm/cpu64.c
@@ -348,7 +348,7 @@ static void aarch64_max_initfn(struct uc_struct *uc, Object *obj, void *opaque)
     u = cpu->isar.id_mmfr4;
     u = FIELD_DP32(u, ID_MMFR4, HPDS, 1); /* AA32HPD */
     u = FIELD_DP32(u, ID_MMFR4, AC2, 1); /* ACTLR2, HACTLR2 */
-    u = FIELD_DP32(t, ID_MMFR4, CNP, 1); /* TTCNP */
+    u = FIELD_DP32(u, ID_MMFR4, CNP, 1); /* TTCNP */
     cpu->isar.id_mmfr4 = u;
 
     u = cpu->isar.id_aa64dfr0;