TL-AP302C-POE主控为qca9533改16M刷不死，出现致命错误

TL-AP302C-POE主控为qca9533，改了16M，刷了不死，能启动集客，最后会出现致命错误。请问大佬指点一下。TTL如下：Boot and Recovery Environment for Embedded Devices Copyright (C) 2021 HackPascal <[email protected]> Build date 2021-12-15 [git-f9b74d0] Version 1.1 (r1337) DRAM: 64MB Platform: Qualcomm Atheros QCA953X rev 2 Board: Letv LBA-047-CH Clocks: CPU: 550MHz, DDR: 400MHz, AHB: 200MHz, Ref: 25MHz Flash: Winbond W25Q128 (16MB) on ath79-spi ag71xx-eth: MAC address is invalid, using default settings. ag71xx-eth: Using MAC address 00:13:74:00:00:01 Waiting for auto-negotiation complete ... OK eth0: Atheros AR8228/AR8229 rev 1 Network started on eth0, inet addr 192.168.1.1, netmask 255.255.255.0 Press any key to interrupt autoboot ... 0 Trying to boot firmware from 0x9f020000 ... TP-LINK firmware image header detected. Image Name: 08410009 Data Size: 853980 Bytes Load Address: 80060000 Entry Point: 80060000 Starting kernel at 0x80060000... Linux version 3.3.8 ([email protected]) (AP941/QSDK) 2024-08-10 16:08:58 bootconsole [early0] enabled CPU revision is: 00019374 (MIPS 24Kc) SoC: Qualcomm Atheros QCA9531 rev 2 Clocks: CPU:550.000MHz, DDR:400.000MHz, AHB:200.000MHz, Ref:25.000MHz Determined physical RAM map: memory: 04000000 @ 00000000 (usable) Zone PFN ranges: Normal 0x00000000 -> 0x00004000 Movable zone start PFN for each node Early memory PFN ranges Kernel command line: board=AP941 console=ttyS0,115200 rootfstype=squashfs,jffs2 noinitrd crashkernel=10M@20M oops=panic PID hash table entries: 256 (order: -2, 1024 bytes) Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes Writing ErrCtl register=000331b7 Readback ErrCtl register=000331b7 Memory: 61528k/65536k available (1979k kernel code, 4008k reserved, 344k data, 160k init, 0k highmem SLUB: Genslabs=9, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 NR_IRQS:51 Calibrating delay loop... 366.18 BogoMIPS (lpj=1830912) pid_max: default: 32768 minimum: 301 Mount-cache hash table entries: 512 NET: Registered protocol family 16 Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A console [ttyS0] enabled, bootconsole disabled m25p80 spi0.0: found w25q128, expected m25p80 m25p80 spi0.0: w25q128 (16384 Kbytes) m25p80 spi0.0: spi jedec id: 0xEF4018 (w25q128 00) 6 tp-link partitions found on MTD device spi0.0 Creating 6 MTD partitions on