Seems related to PR 14153. We try to insert an operand for *PTR when PTR has no memory tag. This happens within PRE. Looking into it. Diego.