diff --git a/qemu/maze.S b/qemu/maze.S
index 8b3641e..685f631 100644
--- a/qemu/maze.S
+++ b/qemu/maze.S
@@ -1,15 +1,15 @@
     .syntax unified
     .cpu cortex-a7
     .thumb
-    @ maze entry logger: record lr/sp to mailbox 0x08062200, return 0.
+    @ maze entry logger: record lr/sp to mailbox 0x08800200, return 0.
     @ Guard: if lr is outside known-good SBL/stub ranges, spin with
     @ interrupts disabled instead of jumping into the void (post-mortem
     @ via vec trap regs).
     .text
     .global maze_stub
 maze_stub:
-    movw r12, #:lower16:0x08062200
-    movt r12, #:upper16:0x08062200
+    movw r12, #:lower16:0x08800200
+    movt r12, #:upper16:0x08800200
     str lr, [r12]
     str sp, [r12, #4]
     movs r0, #0