A3k onboard RAM grows from 0x07ffffff downwards, with 16 MB ZIPs down to 0x07000000.
Where's the accelerator RAM located at?
The 0xfffffffc should be fine, it means 'any RAM 32 bit aligned' - since faster mem is given a higher priority, that's where it should end up at. Have you tried with a smaller Max Xfer value (0xffff)?
What's the working mask value?