I found the answer,
it was because of ZCD_NV_ZDO_DIRECT_CB ,
this option must set to True.
From ZNP manual :
This configures the manner in which ZDO responses (hereby referred to as callbacks) are issued
to the host processor. By default, this item is set to FALSE, which means that the host processor
must use the ZDO_MSG_CB_REGISTER command to subscribe to a specific ZDO callback in
order to receive it. The ZDO callback is then conveyed as part of the ZDO_MSG_CB_INCOMING
command. If ZCD_NV_ZDO_DIRECT_CB is set TRUE, then the host processor will receive the
“verbose” response. For example, the host processor would receive the ZDO_IEEE_ADDR_RSP
command in response to ZDO_IEEE_ADDR_REQ.