DH-SD6C3425GB-HNR-A-PV1 bootloop and firmware flash

[Virgin]

Helloo warriors. I have a problem with SD6C3425GB-HNR-A-PV1 PTZ camera. It was working for like one year and somehow it stopped working after the night. There was no electric shock, I wasn't updating firmware, weather condition was normal. It seems to be stuck in bootloop. It appears in config tool for a few seconds and dissappears, I can't log in using web interface, I can't initialize camera from config tool. CMD Ping works, but after about 4 minutes ping dissappears for like 10 seconds and comes back. I can hear camera "tick" every ~4 minutes, it seems to be rebooting. I tried to rewrite firmware using TFTP method with lan cable, it seems to be successful, but situation doesn't change, except I can see in config tool for one second that firmware changed. I was following this thread

Dahua IPC EASY unbricking / recovery over TFTP

A successor of Dahua IPC unbricking / recovery over serial UART and TFTP I recommend you to read through the above thread first. If your camera still has a working bootloader (assume it does) then you can flash it easily, because: The camera tries to download a file called...

ipcamtalk.com

. My commands were:
tftp CONFIG_SYS_DEFAULT_LOAD_ADDR dhdtb.bin.img; flwrite.
tftp CONFIG_SYS_DEFAULT_LOAD_ADDR dhboot-min.bin.img; flwrite.
tftp CONFIG_SYS_DEFAULT_LOAD_ADDR dhboot.bin.img; flwrite.
tftp CONFIG_SYS_DEFAULT_LOAD_ADDR pd-x.squashfs.img; flwrite.
tftp CONFIG_SYS_DEFAULT_LOAD_ADDR romfs-x.squashfs.img; flwrite.
tftp CONFIG_SYS_DEFAULT_LOAD_ADDR kernel.img; flwrite.
tftp CONFIG_SYS_DEFAULT_LOAD_ADDR firmware-x.ext4_aa.img; flwrite.
tftp CONFIG_SYS_DEFAULT_LOAD_ADDR firmware-x.ext4_ab.img; flwrite.
tftp CONFIG_SYS_DEFAULT_LOAD_ADDR firmware-x.ext4_ac.img; flwrite.
tftp CONFIG_SYS_DEFAULT_LOAD_ADDR web-x.squashfs.img; flwrite.
tftp CONFIG_SYS_DEFAULT_LOAD_ADDR .FLASHING_DONE_STOP_TFTP_NOW.
sleep 5
Every file seems to go successfully.
I have uart ttl adapter too and tried tftp install using uart, also sd card upgrade, every file seems to go well, I tried fw from dahua web Dahua Technology - World-leading Video-centric AIoT Solution and Service Provide

My printenv, help and partition info attached:


Uart log if I don't stop booting:

DH-Boot ver001.001.001-svn10032 (Mar 29 2022 - 00:10:56 +0800)

MMC: host init
dhboot flash register.
$Tch SpiNand
Tch SpiNor
Tch Mmc
Image flag error! read=0x00000000
DScan SpiNand
scan blk : 64
Image flag error! read=0x00000000
scan blk : 128
Image flag error! read=0x00000000
scan blk : 192
Image flag error! read=0x00000000
scan blk : 256
Image flag error! read=0x00000000
scan blk : 320
Image flag error! read=0x00000000
scan blk : 384
Image flag error! read=0x00000000
scan blk : 448
Image flag error! read=0x00000000
scan blk : 512
Image flag error! read=0x00000000
scan blk : 576
Image flag error! read=0x00000000
scan blk : 640
Image flag error! read=0x00000000
scan blk : 704
Image flag error! read=0x00000000
scan blk : 768
Image flag error! read=0x00000000
scan blk : 832
Image flag error! read=0x00000000
scan blk : 896
Image flag error! read=0x00000000
scan blk : 960
Image flag error! read=0x00000000
scan blk : 1024
Image flag error! read=0x00000000
DScan fail!
DScan SpiNor
Image flag error! read=0xFFFFFFFF
DScan fail!
DScan Mmc
Image flag error! read=0x00000000
Image flag error! read=0x00000000
Image flag error! read=0x00000000
Image flag error! read=0x00000000
Image flag error! read=0x00000000
Image flag error! read=0x00000000
Load 0x00000080 to 0x00100000,size=31004
imgcrc pass!
Jmp 0x00100000

Info: write leveling start
Info: write leveling done

Info: dqs gating start
Info: dqs gating done

Info: read train start
Info: bypass read train done

Info: write train start
ddr init done

simple ddr test
swap
ddr_clk: 599500
cpu_clk: 1000000
enc_clk: 400000

DDR32bit done!

B: Mar 29 2022 00:11:21
chip id is 0x0x7FB3804C
mac io keep 3.3v
PreImgHeaderBase = 0x0010FE78
Mmc : Scan Uimg @0x50200000
use 2 plane to read
Load 0x50200040 to 0x12000000,size=197584
Jmp 0x12000000

Looking for any advice what could I be doing wrong.