ZTE MF286D installing problem

Hello every one! I need help. I have going throw installation and get bad flashing layout.

First login is sucsess, but reboot is faild.

Here is my log:

daria@daria-pc:~$ sudo minicom -D /dev/ttyUSB0
[sudo] пароль для daria: 


Добро пожаловать в minicom 2.8

ПАРАМЕТРЫ: I18n 
Port /dev/ttyUSB0

Нажмите CTRL-A Z для получения подсказки по клавишам


Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.1.1-00126
S - IMAGE_VARIANT_STRING=DAABANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x00000021
S - Reset status Config, 0x00000000
S - Core 0 Frequency, 0 MHz
B -       262 - PBL, Start
B -      1343 - bootable_media_detect_entry, Start
B -      1686 - bootable_media_detect_success, Start
B -      1701 - elf_loader_entry, Start
B -      5142 - auth_hash_seg_entry, Start
B -      7323 - auth_hash_seg_exit, Start
B -    589062 - elf_segs_hash_verify_entry, Start
B -    708642 - PBL, End
B -    708666 - SBL1, Start
B -    799613 - pm_device_init, Start
D -         7 - pm_device_init, Delta
B -    801094 - boot_flash_init, Start
D -     53511 - boot_flash_init, Delta
B -    858760 - boot_config_data_table_init, Start
D -      3874 - boot_config_data_table_init, Delta - (419 Bytes)
B -    865965 - clock_init, Start
D -      7824 - clock_init, Delta
B -    878269 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:1
B -    881683 - sbl1_ddr_set_params, Start
B -    886781 - cpr_init, Start
D -         2 - cpr_init, Delta
B -    891163 - Pre_DDR_clock_init, Start
D -         4 - Pre_DDR_clock_init, Delta
D -     13177 - sbl1_ddr_set_params, Delta
B -    904477 - pm_driver_init, Start
D -         2 - pm_driver_init, Delta
B -    974904 - sbl1_wait_for_ddr_training, Start
D -        27 - sbl1_wait_for_ddr_training, Delta
B -    990269 - Image Load, Start
D -    153146 - QSEE Image Loaded, Delta - (299560 Bytes)
B -   1143845 - Image Load, Start
D -      1444 - SEC Image Loaded, Delta - (2048 Bytes)
B -   1154139 - Image Load, Start
D -    247667 - APPSBL Image Loaded, Delta - (507011 Bytes)
B -   1402203 - QSEE Execution, Start
D -        60 - QSEE Execution, Delta
B -   1408415 - SBL1, End
D -    701856 - SBL1, Delta
S - Flash Throughput, 2012 KB/s  (809038 Bytes,  402104 us)
S - DDR Frequency, 672 MHz


U-Boot 2012.07 [Chaos Calmer 15.05.1,f53cef1+r49254] (Mar 05 2021 - 15:20:47)

smem ram ptable found: ver: 1 len: 3
DRAM:  256 MiB
machid : 0x8010001
NAND:  ID = 302012c
Vendor = 2c
Device = 1
ONFI device found
SF: Detected GD25Q16 with page size 4 KiB, total 2 MiB
ipq_spi: page_size: 0x100, sector_size: 0x1000, size: 0x200000
130 MiB
*** Warning - bad CRC, using default environment

In:    serial
Out:   serial
Err:   serial
machid: 8010001
flash_type: 0
Uaztemain: enter into ! 
ZTE_InitFotaFlashPara: nand_curr_device=0
zte_getHandOffState: read data=0xff from 0x0
Press ESC to abort autoboot in 0 seconds
(IPQ40xx) # 
nknown command ' - try 'help'
(IPQ40xx) # setenv serverip 192.168.1.2
(IPQ40xx) # setenv ipaddr 192.168.1.1
(IPQ40xx) # set fdt_high 0x85000000
(IPQ40xx) # tftp openwrt-23.05.4-ipq40xx-generic-zte_mf286d-initramfs-zImage.itb
MAC0 addr:0:3:7f:ba:db:ad
PHY ID1: 0x4d
PHY ID2: 0xd0b1
ipq40xx_ess_sw_init done
eth0
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 up Speed :100 Full duplex
eth0 PHY4 Down Speed :10 Half duplex
Using eth0 device
TFTP from server 192.168.1.2; our IP address is 192.168.1.1
Filename 'openwrt-23.05.4-ipq40xx-generic-zte_mf286d-initramfs-zImage.itb'.
Load address: 0x84000000
Loading: T T T T T T T T T T 
Retry count exceeded; starting again
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 up Speed :100 Full duplex
eth0 PHY4 Down Speed :10 Half duplex
Using eth0 device
TFTP from server 192.168.1.2; our IP address is 192.168.1.1
Filename 'openwrt-23.05.4-ipq40xx-generic-zte_mf286d-initramfs-zImage.itb'.
Load address: 0x84000000
Loading: T T T #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ################################################################
done
Bytes transferred = 6652920 (6583f8 hex)
(IPQ40xx) # bootm $loadaddr
## Booting kernel from FIT Image at 84000000 ...
   Using 'config@ap.dk04.1-c1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM OpenWrt Linux-5.15.162
     Type:         Kernel Image
     Compression:  uncompressed
     Data Start:   0x840000e4
     Data Size:    6631920 Bytes = 6.3 MiB
     Architecture: ARM
     OS:           Linux
     Load Address: 0x80208000
     Entry Point:  0x80208000
     Hash algo:    crc32
     Hash value:   ae2d8268
     Hash algo:    sha1
     Hash value:   6c2374fad8fcee006fe7a73aada01973a7c94509
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Flattened Device Tree from FIT Image at 84000000
   Using 'config@ap.dk04.1-c1' configuration
   Trying 'fdt-1' FDT blob subimage
     Description:  ARM OpenWrt zte_mf286d device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x84653408
     Data Size:    19105 Bytes = 18.7 KiB
     Architecture: ARM
     Hash algo:    crc32
     Hash value:   40fdc7b4
     Hash algo:    sha1
     Hash value:   1992cbaae5ebb80f2739e73ef7e793d6b34d7033
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x84653408
   Loading Kernel Image ... OK
OK
   Loading Device Tree to 84ff8000, end 84fffaa0 ... OK
eth0 MAC Address from ART is not valid
eth1 MAC Address from ART is not valid
Using machid 0x8010001 from environment

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 5.15.162 (builder@buildhost) (arm-openwrt-linux-muslgnueabi-gcc (OpenWrt GCC 12.3.0 r24012-d8dd03c46f) 124
[    0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c5387d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] OF: fdt: Machine model: ZTE MF286D
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000080000000-0x000000008fffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000080000000-0x0000000087dfffff]
[    0.000000]   node   0: [mem 0x0000000087e00000-0x0000000087ffffff]
[    0.000000]   node   0: [mem 0x0000000088000000-0x000000008fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000080000000-0x000000008fffffff]
[    0.000000] percpu: Embedded 12 pages/cpu s19660 r8192 d21300 u49152
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 64960
[    0.000000] Kernel command line:  root=/dev/ubiblock0_1
[    0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes, linear)
[    0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 234912K/262144K available (6766K kernel code, 611K rwdata, 1020K rodata, 13312K init, 246K bss, 27232K reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] arch_timer: cp15 timer(s) running at 48.00MHz (virt).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xb11fd3bfb, max_idle_ns: 440795203732 ns
[    0.000001] sched_clock: 56 bits at 48MHz, resolution 20ns, wraps every 4398046511096ns
[    0.000025] Switching to timer-based delay loop, resolution 20ns
[    0.000327] Calibrating delay loop (skipped), value calculated using timer frequency.. 96.00 BogoMIPS (lpj=480000)
[    0.000355] CPU: Testing write buffer coherency: ok
[    0.000410] pid_max: default: 32768 minimum: 301
[    0.001247] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.001276] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.003221] qcom_scm: convention: smc legacy
[    0.004411] Setting up static identity map for 0x80300000 - 0x8030003c
[    0.004581] rcu: Hierarchical SRCU implementation.
[    0.005162] smp: Bringing up secondary CPUs ...
[    0.008554] smp: Brought up 1 node, 4 CPUs
[    0.008589] SMP: Total of 4 processors activated (384.00 BogoMIPS).
[    0.008604] CPU: All CPU(s) started in SVC mode.
[    0.015211] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
[    0.015376] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.015409] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[    0.015774] pinctrl core: initialized pinctrl subsystem
[    0.017782] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.018126] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.019421] thermal_sys: Registered thermal governor 'step_wise'
[    0.019851] cpuidle: using governor ladder
[    0.019954] cpuidle: using governor menu
[    0.048857] cryptd: max_cpu_qlen set to 1000
[    0.053455] usbcore: registered new interface driver usbfs
[    0.053533] usbcore: registered new interface driver hub
[    0.053594] usbcore: registered new device driver usb
[    0.053710] pps_core: LinuxPPS API ver. 1 registered
[    0.053724] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.053757] PTP clock support registered
[    0.055889] clocksource: Switched to clocksource arch_sys_counter
[    0.057339] NET: Registered PF_INET protocol family
[    0.057561] IP idents hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.058555] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.058608] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.058634] TCP established hash table entries: 2048 (order: 1, 8192 bytes, linear)
[    0.058677] TCP bind hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.058734] TCP: Hash tables configured (established 2048 bind 2048)
[    0.058880] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.058926] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.059254] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.059308] PCI: CLS 0 bytes, default 64
[    0.062628] workingset: timestamp_bits=14 max_order=16 bucket_order=2
[    0.068867] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.068904] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.200061] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 248)
[    0.204880] bam-dma-engine 8e04000.dma: num-channels unspecified in dt
[    0.204916] bam-dma-engine 8e04000.dma: num-ees unspecified in dt
[    0.206578] tcsr 1949000.tcsr: setting wifi_glb_cfg = 41000000
[    0.206730] tcsr 194b000.tcsr: setting usb hs phy mode select = e700e7
[    0.206859] tcsr 1953000.ess_tcsr: setting ess interface select = 0
[    0.206956] tcsr 1957000.tcsr: setting wifi_noc_memtype_m0_m2 = 2222222
[    0.207279] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.209373] msm_serial 78af000.serial: msm_serial: detected port #0
[    0.209429] msm_serial 78af000.serial: uartclk = 1843200
[    0.209489] 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 33, base_baud = 115200) is a MSM
[    0.209529] msm_serial: console setup on port #0
[    0.755597] printk: console [ttyMSM0] enabled
[    0.760729] msm_serial: driver initialized
[    0.770295] loop: module loaded
[    0.772118] nand: device found, Manufacturer ID: 0x2c, Chip ID: 0xf1
[    0.772255] nand: Micron MT29F1G08ABAEAWP
[    0.778892] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    0.782847] 12 fixed-partitions partitions found on MTD device qcom_nand.0
[    0.790276] OF: Bad cell count for /soc/nand-controller@79b0000/nand@0/partitions
[    0.797121] OF: Bad cell count for /soc/nand-controller@79b0000/nand@0/partitions
[    0.805040] OF: Bad cell count for /soc/nand-controller@79b0000/nand@0/partitions
[    0.812155] OF: Bad cell count for /soc/nand-controller@79b0000/nand@0/partitions
[    0.820167] Creating 12 MTD partitions on "qcom_nand.0":
[    0.827059] 0x000000000000-0x0000000a0000 : "fota-flag"
[    0.834058] 0x0000000a0000-0x000000120000 : "ART"
[    0.838830] 0x000000120000-0x0000001a0000 : "mac"
[    0.843633] 0x0000001a0000-0x000000260000 : "reserved2"
[    0.848709] 0x000000260000-0x000000660000 : "cfg-param"
[    0.858754] 0x000000660000-0x000000a60000 : "log"
[    0.865578] 0x000000a60000-0x000000b00000 : "oops"
[    0.867275] 0x000000b00000-0x000001000000 : "reserved3"
[    0.877599] 0x000001000000-0x000001800000 : "web"
[    0.890538] 0x000001800000-0x000003500000 : "rootfs"
[    0.936129] mtd: setting mtd9 (rootfs) as root device
[    0.936761] mtdsplit: no squashfs found in "rootfs"
[    0.940191] 0x000003500000-0x000004e00000 : "data"
[    0.984039] 0x000004e00000-0x000008000000 : "fota"
[    1.067799] spi_qup 78b5000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64
[    1.069599] spi-nor spi0.0: gd25q16 (2048 Kbytes)
[    1.073988] 8 fixed-partitions partitions found on MTD device spi0.0
[    1.078589] Creating 8 MTD partitions on "spi0.0":
[    1.084961] 0x000000000000-0x000000040000 : "0:SBL1"
[    1.090288] 0x000000040000-0x000000060000 : "0:MIBIB"
[    1.095272] 0x000000060000-0x0000000c0000 : "0:QSEE"
[    1.100181] 0x0000000c0000-0x0000000d0000 : "0:CDT"
[    1.105289] 0x0000000d0000-0x0000000e0000 : "0:DDRPARAMS"
[    1.109926] 0x0000000e0000-0x0000000f0000 : "0:APPSBLENV"
[    1.115327] 0x0000000f0000-0x0000001b0000 : "0:APPSBL"
[    1.120899] 0x0000001b0000-0x000000200000 : "0:reserved1"
[    1.239048] i2c_dev: i2c /dev entries driver
[    1.241213] sdhci: Secure Digital Host Controller Interface driver
[    1.242399] sdhci: Copyright(c) Pierre Ossman
[    1.248456] sdhci-pltfm: SDHCI platform and OF driver helper
[    1.257205] NET: Registered PF_INET6 protocol family
[    1.260245] Segment Routing with IPv6
[    1.263549] In-situ OAM (IOAM) with IPv6
[    1.267202] NET: Registered PF_PACKET protocol family
[    1.271101] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if y.
[    1.276349] 8021q: 802.1Q VLAN Support v1.8
[    1.289119] Registering SWP/SWPB emulation handler
[    1.324085] qca8k-ipq4019 c000000.switch: configuring for fixed/internal link mode
[    1.324340] qca8k-ipq4019 c000000.switch: Link is Up - 1Gbps/Full - flow control rx/tx
[    1.409254] qca8k-ipq4019 c000000.switch lan4 (uninitialized): PHY [90000.mdio-1:01] driver [Qualcomm QCA8075] (irq=POLL)
[    1.489315] qca8k-ipq4019 c000000.switch lan3 (uninitialized): PHY [90000.mdio-1:02] driver [Qualcomm QCA8075] (irq=POLL)
[    1.569324] qca8k-ipq4019 c000000.switch lan2 (uninitialized): PHY [90000.mdio-1:03] driver [Qualcomm QCA8075] (irq=POLL)
[    1.650838] qca8k-ipq4019 c000000.switch wan (uninitialized): PHY [90000.mdio-1:04] driver [Qualcomm QCA8075] (irq=POLL)
[    1.651796] DSA: tree 0 setup
[    1.662307] UBI error: no valid UBI magic found inside mtd10
[[    1.693631] Freeing unused kernel image (initmem) memory: 13312K
[    1.693933] Run /init as init process
[    2.148733] init: Console is alive
[    2.149114] init: - watchdog -
[    2.160815] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.384382] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    2.384462] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1
[    2.389081] xhci-hcd xhci-hcd.0.auto: hcc params 0x0228f665 hci version 0x100 quirks 0x0000008002010010
[    2.396430] xhci-hcd xhci-hcd.0.auto: irq 104, io mem 0x08a00000
[    2.405930] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    2.411973] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2
[    2.417287] xhci-hcd xhci-hcd.0.auto: Host supports USB 3.0 SuperSpeed
[    2.425570] hub 1-0:1.0: USB hub found
[    2.431506] hub 1-0:1.0: 1 port detected
[    2.435578] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    2.442567] hub 2-0:1.0: USB hub found
[    2.447367] hub 2-0:1.0: 1 port detected
[    2.451416] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    2.454949] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 3
[    2.460534] xhci-hcd xhci-hcd.1.auto: hcc params 0x0220f665 hci version 0x100 quirks 0x0000008002010010
[    2.467867] xhci-hcd xhci-hcd.1.auto: irq 105, io mem 0x06000000
[    2.477348] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    2.483414] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 4
[    2.488726] xhci-hcd xhci-hcd.1.auto: Host supports USB 3.0 SuperSpeed
[    2.497020] hub 3-0:1.0: USB hub found
[    2.502887] hub 3-0:1.0: 1 port detected
[    2.507104] usb usb4: We don't know the algorithms for LPM for this host, disabling LPM.
[    2.511234] hub 4-0:1.0: USB hub found
[    2.519985] hub 4-0:1.0: config failed, hub doesn't have any ports! (err -19)
[    2.524631] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.535048] init: - preinit -
[    2.713907] random: jshn: uninitialized urandom read (4 bytes read)
[    2.759401] random: jshn: uninitialized urandom read (4 bytes read)
[    2.787724] random: jshn: uninitialized urandom read (4 bytes read)
[    3.010277] ipqess-edma c080000.ethernet eth0: configuring for fixed/internal link mode
[    3.011044] qca8k-ipq4019 c000000.switch lan2: configuring for phy/psgmii link mode
[    3.017247] ipqess-edma c080000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
[    3.576081] usb 2-1: new SuperSpeed USB device number 2 using xhci-hcd
[    3.889352] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    5.997080] qca8k-ipq4019 c000000.switch lan2: Link is Up - 100Mbps/Full - flow control rx/tx
[    5.997167] IPv6: ADDRCONF(NETDEV_CHANGE): lan2: link becomes ready
[    6.009989] qca8k-ipq4019 c000000.switch lan2: Link is Down
[    6.016595] procd: - early -
[    6.016802] procd: - watchdog -
[    6.577692] procd: - watchdog -
[    6.578072] procd: - ubus -
[    6.585684] random: ubusd: uninitialized urandom read (4 bytes read)
[    6.630251] random: ubusd: uninitialized urandom read (4 bytes read)
[    6.630650] random: ubusd: uninitialized urandom read (4 bytes read)
[    6.638390] procd: - init -
Please press Enter to activate this console.
[    6.949588] kmodloader: loading kernel modules from /etc/modules.d/*
[    6.959847] Loading modules backported from Linux version v6.1.97-0-g7753af06eebfb
[    6.959900] Backport generated by backports.git v6.1.97-1-0-g2431d56e
[    7.056252] PPP generic driver version 2.4.2
[    7.057251] NET: Registered PF_PPPOX protocol family
[    7.766029] urngd: v1.0.2 started.
[    7.857315] ath10k_ahb a000000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000
[    7.857436] ath10k_ahb a000000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[    7.869313] ath10k_ahb a000000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmb
[    7.924366] ath10k_ahb a000000.wifi: Loading BDF type 0
[    7.940095] ath10k_ahb a000000.wifi: board_file api 2 bmi_id 0:20 crc32 d140cd7d
[    8.304233] random: crng init done
[    8.304278] random: 30 urandom warning(s) missed due to ratelimiting
[    9.231366] ath10k_ahb a000000.wifi: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[    9.231439] ath10k_ahb a000000.wifi: msdu-desc: 2500  skid: 32
[    9.280936] ath10k_ahb a000000.wifi: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[    9.281891] ath10k_ahb a000000.wifi: wmi print 'free: 53252 iram: 13432 sram: 35752'
[    9.423959] ath10k_ahb a000000.wifi: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-nvmem max-sta 32 raw 0 hwcrypto 1
[   10.344535] ath10k_ahb a800000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000
[   10.344625] ath10k_ahb a800000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   10.356578] ath10k_ahb a800000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmb
[   10.411596] ath10k_ahb a800000.wifi: Loading BDF type 0
[   10.423570] ath10k_ahb a800000.wifi: board_file api 2 bmi_id 0:21 crc32 d140cd7d
[   11.715194] ath10k_ahb a800000.wifi: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   11.715266] ath10k_ahb a800000.wifi: msdu-desc: 2500  skid: 32
[   11.762269] ath10k_ahb a800000.wifi: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   11.763214] ath10k_ahb a800000.wifi: wmi print 'free: 53252 iram: 13432 sram: 35752'
[   11.899166] ath10k_ahb a800000.wifi: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-nvmem max-sta 32 raw 0 hwcrypto 1
[   12.020557] kmodloader: done loading kernel modules from /etc/modules.d/*
[   29.775503] ipqess-edma c080000.ethernet eth0: Link is Down
[   29.780966] ipqess-edma c080000.ethernet eth0: configuring for fixed/internal link mode
[   29.781290] ipqess-edma c080000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
[   29.788472] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   29.809168] qca8k-ipq4019 c000000.switch lan2: configuring for phy/psgmii link mode
[   29.811487] br-lan: port 1(lan2) entered blocking state
[   29.815694] br-lan: port 1(lan2) entered disabled state
[   29.821709] device lan2 entered promiscuous mode
[   29.826111] device eth0 entered promiscuous mode
[   29.848580] qca8k-ipq4019 c000000.switch lan3: configuring for phy/psgmii link mode
[   29.851065] br-lan: port 2(lan3) entered blocking state
[   29.855100] br-lan: port 2(lan3) entered disabled state
[   29.860854] device lan3 entered promiscuous mode
[   29.873721] qca8k-ipq4019 c000000.switch lan4: configuring for phy/psgmii link mode
[   29.876183] br-lan: port 3(lan4) entered blocking state
[   29.880231] br-lan: port 3(lan4) entered disabled state
[   29.885986] device lan4 entered promiscuous mode
[   29.902669] qca8k-ipq4019 c000000.switch wan: configuring for phy/psgmii link mode
[   31.917837] qca8k-ipq4019 c000000.switch lan2: Link is Up - 100Mbps/Full - flow control rx/tx
[   31.917933] br-lan: port 1(lan2) entered blocking state
[   31.925367] br-lan: port 1(lan2) entered forwarding state
[   31.931180] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready

BusyBox v1.36.1 (2024-07-15 22:14:18 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 23.05.4, r24012-d8dd03c46f
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password                               
in order to prevent unauthorized SSH logins.                                    
--------------------------------------------------                              
root@OpenWrt:/# 

After reboot log:

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.1.1-00126
S - IMAGE_VARIANT_STRING=DAABANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x00000021
S - Reset status Config, 0x00000000
S - Core 0 Frequency, 0 MHz
B -       262 - PBL, Start
B -      1343 - bootable_media_detect_entry, Start
B -      1686 - bootable_media_detect_success, Start
B -      1701 - elf_loader_entry, Start
B -      5141 - auth_hash_seg_entry, Start
B -      7323 - auth_hash_seg_exit, Start
B -    589062 - elf_segs_hash_verify_entry, Start
B -    708642 - PBL, End
B -    708666 - SBL1, Start
B -    799613 - pm_device_init, Start
D -         7 - pm_device_init, Delta
B -    801093 - boot_flash_init, Start
D -     53511 - boot_flash_init, Delta
B -    858759 - boot_config_data_table_init, Start
D -      3874 - boot_config_data_table_init, Delta - (419 Bytes)
B -    865965 - clock_init, Start
D -      7575 - clock_init, Delta
B -    878022 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:1
B -    881435 - sbl1_ddr_set_params, Start
B -    886533 - cpr_init, Start
D -         2 - cpr_init, Delta
B -    890915 - Pre_DDR_clock_init, Start
D -         4 - Pre_DDR_clock_init, Delta
D -     13176 - sbl1_ddr_set_params, Delta
B -    904229 - pm_driver_init, Start
D -         2 - pm_driver_init, Delta
B -    974620 - sbl1_wait_for_ddr_training, Start
D -        27 - sbl1_wait_for_ddr_training, Delta
B -    990207 - Image Load, Start
D -    153148 - QSEE Image Loaded, Delta - (299560 Bytes)
B -   1143785 - Image Load, Start
D -      1445 - SEC Image Loaded, Delta - (2048 Bytes)
B -   1154078 - Image Load, Start
D -    247636 - APPSBL Image Loaded, Delta - (507011 Bytes)
B -   1402111 - QSEE Execution, Start
D -        60 - QSEE Execution, Delta
B -   1408321 - SBL1, End
D -    701763 - SBL1, Delta
S - Flash Throughput, 2012 KB/s  (809038 Bytes,  402068 us)
S - DDR Frequency, 672 MHz


U-Boot 2012.07 [Chaos Calmer 15.05.1,f53cef1+r49254] (Mar 05 2021 - 15:20:47)

smem ram ptable found: ver: 1 len: 3
DRAM:  256 MiB
machid : 0x8010001
NAND:  ID = 302012c
Vendor = 2c
Device = 1
ONFI device found
SF: Detected GD25Q16 with page size 4 KiB, total 2 MiB
ipq_spi: page_size: 0x100, sector_size: 0x1000, size: 0x200000
130 MiB
*** Warning - bad CRC, using default environment

In:    serial
Out:   serial
Err:   serial
machid: 8010001
flash_type: 0
Uaztemain: enter into ! 
ZTE_InitFotaFlashPara: nand_curr_device=0
zte_getHandOffState: read data=0xff from 0x0
Press ESC to abort autoboot in 0 seconds
Creating 1 MTD partitions on "nand0":
0x000001800000-0x000003500000 : "mtd=0"
UBI: attaching mtd2 to ubi0
UBI: physical eraseblock size:   131072 bytes (128 KiB)
UBI: logical eraseblock size:    126976 bytes
UBI: smallest flash I/O unit:    2048
UBI: VID header offset:          2048 (aligned 2048)
UBI: data offset:                4096
Nand Flash error. Status = 12336
NAND page read failed. page: 5a41 status ffffffb6
Nand Flash error. Status = 12336
NAND page read failed. page: 5a81 status ffffffb6
Nand Flash error. Status = 12336
NAND page read failed. page: 5ac1 status ffffffb6
Nand Flash error. Status = 12336
NAND page read failed. page: 5b01 status ffffffb6
Nand Flash error. Status = 12336
NAND page read failed. page: 5bc1 status ffffffb6
Nand Flash error. Status = 12336
NAND page read failed. page: 5c01 status ffffffb6
Nand Flash error. Status = 12336
NAND page read failed. page: 5c41 status ffffffb6
Nand Flash error. Status = 12336
NAND page read failed. page: 5c81 status ffffffb6
Nand Flash error. Status = 12336
NAND page read failed. page: 5cc1 status ffffffb6
Nand Flash error. Status = 12336
NAND page read failed. page: 5d01 status ffffffb6
Nand Flash error. Status = 12336
NAND page read failed. page: 5d41 status ffffffb6
Nand Flash error. Status = 12336
NAND page read failed. page: 5d81 status ffffffb6
UBI: attached mtd2 to ubi0
UBI: MTD device name:            "mtd=0"
UBI: MTD device size:            29 MiB
UBI: number of good PEBs:        232
UBI: number of bad PEBs:         0
UBI: max. allowed volumes:       128
UBI: wear-leveling threshold:    4096
UBI: number of internal volumes: 1
UBI: number of user volumes:     2
UBI: available PEBs:             42
UBI: total number of reserved PEBs: 190
UBI: number of PEBs reserved for bad PEB handling: 2
UBI: max/mean erase counter: 5/1
zte_set_download_led(0) is called
timer=17e2fd54 ha=1ed82284
ip=192.34.216.30 mac=0x00:0xaa:0xbb:0x22:0xd8:0x1e
MAC0 addr:0:3:7f:ba:db:ad
PHY ID1: 0x4d
PHY ID2: 0xd0b1
ipq40xx_ess_sw_init done
eth0
Warning: eth0 MAC addresses don't match:
Address in SROM is         00:03:7f:ba:db:ad
Address in environment is  00:aa:bb:22:d8:1e

eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 up Speed :100 Full duplex
eth0 PHY4 Down Speed :10 Half duplex
Using eth0 device
TFTP from server 192.0.0.1; our IP address is 192.34.216.30
Filename 'root_uImage'.
Load address: 0x84000000
Loading: T T T T T T T T T T 
Retry count exceeded; starting again
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 up Speed :100 Full duplex
eth0 PHY4 Down Speed :10 Half duplex
Using eth0 device
TFTP from server 192.0.0.1; our IP address is 192.34.216.30
Filename 'root_uImage'.
Load address: 0x84000000
Loading: T T T T T T T T T T 
Retry count exceeded; starting again
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 up Speed :100 Full duplex
eth0 PHY4 Down Speed :10 Half duplex

Bad layout is:

[    0.820167] Creating 12 MTD partitions on "qcom_nand.0":
[    0.827059] 0x000000000000-0x0000000a0000 : "fota-flag"
[    0.834058] 0x0000000a0000-0x000000120000 : "ART"
[    0.838830] 0x000000120000-0x0000001a0000 : "mac"
[    0.843633] 0x0000001a0000-0x000000260000 : "reserved2"
[    0.848709] 0x000000260000-0x000000660000 : "cfg-param"
[    0.858754] 0x000000660000-0x000000a60000 : "log"
[    0.865578] 0x000000a60000-0x000000b00000 : "oops"
[    0.867275] 0x000000b00000-0x000001000000 : "reserved3"
[    0.877599] 0x000001000000-0x000001800000 : "web"
[    0.890538] 0x000001800000-0x000003500000 : "rootfs"
[    0.936129] mtd: setting mtd9 (rootfs) as root device
[    0.936761] mtdsplit: no squashfs found in "rootfs"
[    0.940191] 0x000003500000-0x000004e00000 : "data"
[    0.984039] 0x000004e00000-0x000008000000 : "fota"
[    1.067799] spi_qup 78b5000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64
[    1.069599] spi-nor spi0.0: gd25q16 (2048 Kbytes)
[    1.073988] 8 fixed-partitions partitions found on MTD device spi0.0
[    1.078589] Creating 8 MTD partitions on "spi0.0":
[    1.084961] 0x000000000000-0x000000040000 : "0:SBL1"
[    1.090288] 0x000000040000-0x000000060000 : "0:MIBIB"
[    1.095272] 0x000000060000-0x0000000c0000 : "0:QSEE"
[    1.100181] 0x0000000c0000-0x0000000d0000 : "0:CDT"
[    1.105289] 0x0000000d0000-0x0000000e0000 : "0:DDRPARAMS"
[    1.109926] 0x0000000e0000-0x0000000f0000 : "0:APPSBLENV"
[    1.115327] 0x0000000f0000-0x0000001b0000 : "0:APPSBL"
[    1.120899] 0x0000001b0000-0x000000200000 : "0:reserved1"
[    1.239048] i2c_dev: i2c /dev entries driver