Will that work, if you wipe out all mtd devices to zeros with dd? # cat /proc/mtd dev: size erasesize name mtd0: 00020000 00020000 "bootloader" mtd1: 00060000 00020000 "config" mtd2: 00040000 00020000 "log" mtd3: 00200000 00020000 "kernel" mtd4: 00200000 00020000 "initfs" mtd5: 0fb40000 00020000 "rootfs" I still have this problem. Flashing both rootfs and eMMC with PR1.3 images didn't fix the problem, so something still hides inside the phone which makes it buggy with this one operator's SIM-card.