Looks like we are narrowing it down. This may be a bug in the firmware itself
when dealing with high addresses. Let me check on my side which address the ACR
is loaded, and if I can force a lower address for it.