Database Users

[Q] Phone hangs booting into recovery ( no normal boot either )

I have a mytouch 3g and it no longer boots into recovery. All I get it the first line:
Build : RA-saphire-v1.7.0G and nothing else.
The phone is still accessable via adb in recovery.
I have flashed recovery.img serveral times using fastboot but to know avail Looking at the kernel output, It appears that the mtdblock4 is corrupt and the recovery process hangs because of yaffs issues. Also just trying to mount /cache causes the command to hang.
Below is the relevant output:
Any suggestions on how to un-corrupt the cache partition?
[ 6.736572] Creating 6 MTD partitions on "msm_nand":
[ 6.736602] 0x0000024c0000-0x000002500000 : "misc"
[ 6.738555] 0x0000026c0000-0x000002bc0000 : "recovery"
[ 6.739868] 0x000002bc0000-0x000002e40000 : "boot"
[ 6.741058] 0x000002e40000-0x000008840000 : "system"
[ 6.742462] 0x000008840000-0x00000d840000 : "cache"
[ 6.743835] 0x00000d840000-0x000020000000 : "userdata"
..
[ 10.782379] yaffs: passed flags ""
[ 10.782714] yaffs: Attempting MTD mount on 31.4, "mtdblock4"
[ 12.179199] yaffs tragedy: Bad object type, 1 != 3, for object 4 at chunk 21738 during scan
[ 12.179901] ==>> yaffs bug: fs/yaffs2/yaffs_guts.c 6666
[ 12.180511] ==>> yaffs bug: fs/yaffs2/yaffs_guts.c 6666
[ 12.719390] yaffs tragedy: Bad object type, 1 != 3, for object 265 at chunk 17735 during scan
[ 13.914916] Unable to handle kernel paging request at virtual address cd7c40e4
**** RECOVERY HANGS HERE ******

gustden said:
I have a mytouch 3g and it no longer boots into recovery. All I get it the first line:
Build : RA-saphire-v1.7.0G and nothing else.
The phone is still accessable via adb in recovery.
I have flashed recovery.img serveral times using fastboot but to know avail Looking at the kernel output, It appears that the mtdblock4 is corrupt and the recovery process hangs because of yaffs issues. Also just trying to mount /cache causes the command to hang.
Below is the relevant output:
Any suggestions on how to un-corrupt the cache partition?
[ 6.736572] Creating 6 MTD partitions on "msm_nand":
[ 6.736602] 0x0000024c0000-0x000002500000 : "misc"
[ 6.738555] 0x0000026c0000-0x000002bc0000 : "recovery"
[ 6.739868] 0x000002bc0000-0x000002e40000 : "boot"
[ 6.741058] 0x000002e40000-0x000008840000 : "system"
[ 6.742462] 0x000008840000-0x00000d840000 : "cache"
[ 6.743835] 0x00000d840000-0x000020000000 : "userdata"
..
[ 10.782379] yaffs: passed flags ""
[ 10.782714] yaffs: Attempting MTD mount on 31.4, "mtdblock4"
[ 12.179199] yaffs tragedy: Bad object type, 1 != 3, for object 4 at chunk 21738 during scan
[ 12.179901] ==>> yaffs bug: fs/yaffs2/yaffs_guts.c 6666
[ 12.180511] ==>> yaffs bug: fs/yaffs2/yaffs_guts.c 6666
[ 12.719390] yaffs tragedy: Bad object type, 1 != 3, for object 265 at chunk 17735 during scan
[ 13.914916] Unable to handle kernel paging request at virtual address cd7c40e4
**** RECOVERY HANGS HERE ******
Click to expand...
Click to collapse
Did you try to install recovery via ROM Manager (acceable at market)??? And you must have root to do it. If you dont go to the www.theunlockr.com and how to's section has everything for magic

I have tried everything I can think of. Here is my lastest attempt:
1. Flash sappimg.zip using goldcard ( to get fastboot access )
2. Flashed recovery.img via fastboot
3. Flashed hboot.nb0 via fastboot
4. Flashed boot.img via fastboot
The phone does not boot, so installing anyting from market is impossible.
If you look at the output in the original post, booting into recovery fails trying to mount the CACHE partion. Is there any way to zero out the nand memory in the cache segment?

Try this:
Code:
fastboot erase cache
fastboot erase system
fastboot erase boot
fastboot erase data

It failed when I initially tried to do a fastboot erase cache...
I was able to create a file the size of cache space, consisting of all 0x00s and flashed that to the cache partition.
It gave me an error about no space left on the device, but now the "fastboot erase cache" works just fine I would think that both do the same thing!
Many thanks, everything seems normal at the moment!!!

Hi
I am having the same problem where mtdblock4 is corrupt (a crash just after flashing a rom)
Having a mt3g Fender I am s-on
I am not having any luck with the gold card I keep getting 'model ID incorrect'.. I have tried 2 sdcards many times..
is there anyway I can do this from adb? I am pretty much out of ideas.. I will keep at the gold card problem.. I made a gold card successfully for the initial rooting
any help is much appreciated
Edit:
Ok I managed to get this fixed without a goldcard!
I unzipped Ohsaka-SuperWipe_v2.zip
then used adb to push erase_image and SuperWipe.sh to /tmp/SuperWipe
chmod +x those then ./SuperWipe.sh
and problem solved..
what a PITA!

Instal Blackberry priv Non US Carrier autoloader on AT&T

Hey
Is it possible to install Non US Carrier autoloader on AT&T to get rid of AT&T bloatware and to getting latest update via OTA?
Because I am live outs the US and did not have AT&T SIM.
Sent from my STV100-1 using Tapatalk

Here is what I have done with my AT&T Priv.
1. Download both AT&T and common non-US carrier autoloader archives from BB website and extract them to separate folders. Make sure to download the closest versions of the two autoloaders.
2. Replace img/oem.img file in AT&T autoloader with the one from common autoloader.
Run flashall script in AT&T autoloader to flash your phone as usual, you will be upgraded to the latest AT&T ROM without those AT&T bloatware.
Bonus:
If you would like to preserve data when flashing autoloaders, i.e. upgrade without reset your phone to factory default, follow this:
Open flashall script and comment out two lines that run below commands:
fastboot.exe oem securewipe
flash userdata %IMG%\userdata.img
Then run flashall script as usual.
Above are all tested on my phone without problem.

Thank you.
Sent from my iPad using Tapatalk

I did it today. It is woks perfectly. Thank you a lot :good:

I had a typo in my post regarding how to avoid wiping data while flashing. The 2nd command to comment out should be "flash userdata %IMG%\userdata.img".

Hey Kraml, your solution has a lot of interested folks over at Crackberry. Can you post some more detailed instructions?
Better yet, if you have an autoloader that's Marshmellow based already set up and share it with the community you'd become an instant rock star!
Here's the thread I started:
forums dot crackberry dot com/blackberry-priv-f440/potential-solution-our-vzw-att-friends-older-roms-1085292/#post12578681
replace dots with periods to get the link!

Does this convert AT&T to factory unlock??

zed011 said:
Does this convert AT&T to factory unlock??
Click to expand...
Click to collapse
No. It removes ATT software only.

kraml said:
I had a typo in my post regarding how to avoid wiping data while flashing. The 2nd command to comment out should be "flash userdata %IMG%\userdata.img".
Click to expand...
Click to collapse
Hey i have tried as you said and removed both the lines "fastboot.exe oem securewipe" "flash userdata %IMG%\userdata.img" from flashall.bat But i am getting the following error.
I am using AT and T unlocked device and i have tried the AT and T version AAG202 an i am getting the following error
Could you please help me out
BY INSTALLING THE SOFTWARE, YOU ARE AGREEING TO BE BOUND BY THE BlackBerry
Solution License Agreement which can be reviewed at www.blackberry.com/leg-
al/bbsla. IF YOU HAVE ANY QUESTIONS OR CONCERNS ABOUT THE TERMS OF THIS AG-
REEMENT, PLEASE CONTACT blackberry AT [email protected]. PLEASE READ
THIS DOCUMENT CAREFULLY BEFORE INSTALLING OR USING THE SOFTWARE.
***************************************************************************
Note:If device is not in fastboot mode
Please switch to fastboot mode by holding the power and volume down key for 30s
This script will wipe off all user data. Do you want to continue? [y/n]:y
'.\host\windows-x86\bin' is not recognized as an internal or external command,
operable program or batch file.
"It may take 5 to 15 minutes to securely wipe the device"
target reported max download size of 536870912 bytes
sending 'tz' (560 KB)...
FAILED (remote: authboot command permission denied)
finished. total time: 0.015s
target reported max download size of 536870912 bytes
sending 'hyp' (92 KB)...
FAILED (remote: authboot command permission denied)
finished. total time: 0.018s
target reported max download size of 536870912 bytes
sending 'sdi' (27 KB)...
FAILED (remote: authboot command permission denied)
finished. total time: 0.019s
target reported max download size of 536870912 bytes
sending 'pmic' (32 KB)...
FAILED (remote: authboot command permission denied)
finished. total time: 0.018s
target reported max download size of 536870912 bytes
sending 'rpm' (187 KB)...
FAILED (remote: authboot command permission denied)
finished. total time: 0.027s
target reported max download size of 536870912 bytes
sending 'sbl1' (495 KB)...
FAILED (remote: authboot command permission denied)
finished. total time: 0.032s
target reported max download size of 536870912 bytes
sending 'aboot' (1453 KB)...
FAILED (remote: authboot command permission denied)
finished. total time: 0.027s
target reported max download size of 536870912 bytes
sending 'bootsig' (0 KB)...
FAILED (remote: authboot command permission denied)
finished. total time: 0.020s
target reported max download size of 536870912 bytes
sending 'recoverysig' (0 KB)...
FAILED (remote: authboot command permission denied)
finished. total time: 0.014s
target reported max download size of 536870912 bytes
sending 'boot' (17908 KB)...
FAILED (remote: authboot command permission denied)
finished. total time: 0.016s
target reported max download size of 536870912 bytes
sending 'recovery' (17908 KB)...
FAILED (remote: authboot command permission denied)
finished. total time: 0.021s
target reported max download size of 536870912 bytes
erasing 'cache'...
FAILED (remote: authboot command permission denied)
finished. total time: 0.021s
usage: fastboot [ <option> ] <command>
commands:
update <filename> reflash device from update.zip
flashall flash boot, system, vendor and if found,
recovery
flash <partition> [ <filename> ] write a file to a flash partition
flashing lock locks the device. Prevents flashing
partitions
flashing unlock unlocks the device. Allows user to
flash any partition except the ones
that are related to bootloader
flashing lock_critical Prevents flashing bootloader related
partitions
flashing unlock_critical Enables flashing bootloader related
partitions
flashing get_unlock_ability Queries bootloader to see if the
device is unlocked
flashing get_unlock_bootloader_nonce Queries the bootloader to get the
unlock nonce
flashing unlock_bootloader <request> Issue unlock bootloader using request
flashing lock_bootloader Locks the bootloader to prevent
bootloader version rollback
erase <partition> erase a flash partition
format[:[<fs type>][:[<size>]] <partition> format a flash partition.
Can override the fs type and/or
size the bootloader reports.
getvar <variable> display a bootloader variable
boot <kernel> [ <ramdisk> ] download and boot kernel
flash:raw boot <kernel> [ <ramdisk> ] create bootimage and flash it
devices list all connected devices
continue continue with autoboot
reboot [bootloader] reboot device, optionally into bootloader
reboot-bootloader reboot device into bootloader
help show this help message
options:
-w erase userdata and cache (and format
if supported by partition type)
-u do not first erase partition before
formatting
-s <specific device> specify device serial number
or path to device port
-l with "devices", lists device paths
-p <product> specify product name
-c <cmdline> override kernel commandline
-i <vendor id> specify a custom USB vendor id
-b <base_addr> specify a custom kernel base address.
default: 0x10000000
-n <page size> specify the nand page size.
default: 2048
-S <size>[K|M|G] automatically sparse files greater
than size. 0 to disable
target reported max download size of 536870912 bytes
sending 'modem' (68433 KB)...
FAILED (remote: authboot command permission denied)
finished. total time: 0.014s
target reported max download size of 536870912 bytes
erasing 'system'...
FAILED (remote: authboot command permission denied)
finished. total time: 0.016s
target reported max download size of 536870912 bytes
erasing 'oem'...
FAILED (remote: authboot command permission denied)
finished. total time: 0.015s
rebooting...
finished. total time: 0.008s
Press any key to close this window

its because your phone has password protection. simply remove password / pin or pattern lock screen

Could someone make a file the that is the AT&T update package minus the bloatwear and without the wipe. I would gladly donate for it working.
Sent from my STV100-1 using Tapatalk
---------- Post added at 11:28 PM ---------- Previous post was at 11:25 PM ----------
kraml said:
Here is what I have done with my AT&T Priv.
1. Download both AT&T and common non-US carrier autoloader archives from BB website and extract them to separate folders. Make sure to download the closest versions of the two autoloaders.
2. Replace img/oem.img file in AT&T autoloader with the one from common autoloader.
Run flashall script in AT&T autoloader to flash your phone as usual, you will be upgraded to the latest AT&T ROM without those AT&T bloatware.
Bonus:
If you would like to preserve data when flashing autoloaders, i.e. upgrade without reset your phone to factory default, follow this:
Open flashall script and comment out two lines that run below commands:
fastboot.exe oem securewipe
flash userdata %IMG%\userdata.img
Then run flashall script as usual.
Above are all tested on my phone without problem.
Click to expand...
Click to collapse
Dilini said:
its because your phone has password protection. simply remove password / pin or pattern lock screen
Click to expand...
Click to collapse
Could someone make the file for our AT&T Priv, minus the firmware and where it doesn't wipe the device. I would gladly pay for it!
Sent from my STV100-1 using Tapatalk

Ew, buddy I've done for myself with the instruction pretty easy except PIN password part.
I've pack whole files as a size 1.6GB 7z file, based on my carrier upload limit it's too big to uploading it, estimate more than an hour, so I packed the "Patch"
part for u, which means u still need to access the official site to download AT&T part and decompress it http://global.blackberry.com/content/blackberry-com/en/support/smartphones/Android-OS-Reload.html
Then download my "Patch" part https://drive.google.com/open?id=0B-qpp_ciC37MUEVmSDYzR3c2OXc
Decompress it any where u like then copy it to the folder where your AT&T files decompressed, confirm overwrite the same name files.
Then just run the flashall.bat
And yes I only modified Windows version
theusername said:
Could someone make a file the that is the AT&T update package minus the bloatwear and without the wipe. I would gladly donate for it working.
Sent from my STV100-1 using Tapatalk
---------- Post added at 11:28 PM ---------- Previous post was at 11:25 PM ----------
Could someone make the file for our AT&T Priv, minus the firmware and where it doesn't wipe the device. I would gladly pay for it!
Sent from my STV100-1 using Tapatalk
Click to expand...
Click to collapse

Good morning, I have a question, recently bought the BlackBerry priv AT & T unlocked, I wonder if I can put Android's own BlackBerry 6 clean without losing the unlock? or I have to put the AT & T it? I run the risk of having a locked phone? Excuse my English.

Do we know if this is an error which can be ignored safely or there is fix for this?
error: cannot load '.\img\cache.img.\host\windows-x86\bin\fastboot.exe'
target reported max download size of 536870912 bytes

Hello!
May i ask a question does your patch can work with new version AAG873?
Thanks for your kind reply
loachh said:
Ew, buddy I've done for myself with the instruction pretty easy except PIN password part.
I've pack whole files as a size 1.6GB 7z file, based on my carrier upload limit it's too big to uploading it, estimate more than an hour, so I packed the "Patch"
part for u, which means u still need to access the official site to download AT&T part and decompress it http://global.blackberry.com/content/blackberry-com/en/support/smartphones/Android-OS-Reload.html
Then download my "Patch" part https://drive.google.com/open?id=0B-qpp_ciC37MUEVmSDYzR3c2OXc
Decompress it any where u like then copy it to the folder where your AT&T files decompressed, confirm overwrite the same name files.
Then just run the flashall.bat
And yes I only modified Windows version
Click to expand...
Click to collapse

And also: Could you do a Mac Version as well?
Greetings from Germany

Did anyone else that did this get an OTA update notification today? I'm actually surprised I would get something considering I'm not using an AT&T simcard.
Update:
Looks like this is the reason why I received the OTA update. Blackberry is starting to support the unlocked AT&T phones. http://www.techtimes.com/articles/1...receives-updates-directly-from-blackberry.htm

kraml said:
Here is what I have done with my AT&T Priv.
1. Download both AT&T and common non-US carrier autoloader archives from BB website and extract them to separate folders. Make sure to download the closest versions of the two autoloaders.
2. Replace img/oem.img file in AT&T autoloader with the one from common autoloader.
Run flashall script in AT&T autoloader to flash your phone as usual, you will be upgraded to the latest AT&T ROM without those AT&T bloatware.
Bonus:
If you would like to preserve data when flashing autoloaders, i.e. upgrade without reset your phone to factory default, follow this:
Open flashall script and comment out two lines that run below commands:
fastboot.exe oem securewipe
flash userdata %IMG%\userdata.img
Then run flashall script as usual.
Above are all tested on my phone without problem.
Click to expand...
Click to collapse
I just did this on the Verizon variant, which i'm using on T-Mobile in the US, and it is insane how much better it's running. I'm pretty sure everyone should do this if they don't have the factory unlocked model

kraml said:
Here is what I have done with my AT&T Priv.
1. Download both AT&T and common non-US carrier autoloader archives from BB website and extract them to separate folders. Make sure to download the closest versions of the two autoloaders.
2. Replace img/oem.img file in AT&T autoloader with the one from common autoloader.
Run flashall script in AT&T autoloader to flash your phone as usual, you will be upgraded to the latest AT&T ROM without those AT&T bloatware.
Bonus:
If you would like to preserve data when flashing autoloaders, i.e. upgrade without reset your phone to factory default, follow this:
Open flashall script and comment out two lines that run below commands:
fastboot.exe oem securewipe
flash userdata %IMG%\userdata.img
Then run flashall script as usual.
Above are all tested on my phone without problem.
Click to expand...
Click to collapse
Do you know if this will work on a verizon branded model? I am looking at a VZ model for cheap but will be using it on Tmo, on a side note anyone know if the VZ model supports wifi calling on Tmo? Thanks.

kraml said:
Here is what I have done with my AT&T Priv.
1. Download both AT&T and common non-US carrier autoloader archives from BB website and extract them to separate folders. Make sure to download the closest versions of the two autoloaders.
2. Replace img/oem.img file in AT&T autoloader with the one from common autoloader.
Click to expand...
Click to collapse
I have additionally also replaced system.img with the one from the common autoloader. Otherwise the "System update" wouldn't do anything. Now I get the normal Android update screen, the not dreaded "AT&T Software update". I hope that it'll actually update.
Stefan

(Solved) Moto G5 Plus - Oreo hard brick

After doing a twrp backup of my phone because i wanted to sell it and recover my stuff, and it suddenly stopped working after trying powering on.
The PC recognized it as qusb_bulk, i downloaded the drivers for it. Now it shows as Qualcomm HS-USB QDLoader 9008, but i tried the blankflash for the g5plus (presumably nougat) and one for the z2play and both of them failed. Here's the log.
**** Log buffer [000001] 2018-12-01_22:19:03 ****
[ -0.000] Opening device: \\.\COM4
[ -0.000] Detecting device
[ 4.032] ERROR: sahara_greet_device()->change_mode()->do_hello()->IO error
[ 4.032] Check qboot_log.txt for more details
[ 4.032] Total time: 4.032s
[ 4.032]
[ 4.032] qboot version 3.40
[ 4.032]
[ 4.032] DEVICE {
[ 4.032] name = "\\.\COM4",
[ 4.032] flags = "0x64",
[ 4.032] addr = "0x61FE5C",
[ 4.032] api.bnr = "0x1B2DE8",
[ 4.032] }
[ 4.032]
[ 4.032]
[ 4.032] Backup & Restore {
[ 4.032] num_entries = 0,
[ 4.032] restoring = "false",
[ 4.032] backup_error = "not started",
[ 4.032] restore_error = "not started",
[ 4.032] }
[ 4.032]
And another question i have is, can i make a blankflash file for the g5plus?, i have another one working (in terrible condition) but it works and it has oreo.
Thanks in advance.
Update: just as @[email protected] says it took a long time before it finally flash, almost 2 hours, and got the bootloader, i flashed the last oreo firmware. The phone works fine now and i still have imei and 4G.
Thanks y'all for helping me.

red002 said:
After doing a twrp backup of my phone because i wanted to sell it and recover my stuff, and it suddenly stopped working after trying powering on.
The PC recognized it as qusb_bulk, i downloaded the drivers for it. Now it shows as Qualcomm HS-USB QDLoader 9008, but i tried the blankflash for the g5plus (presumably nougat) and one for the z2play and both of them failed. Here's the log.
**** Log buffer [000001] 2018-12-01_22:19:03 ****
[ -0.000] Opening device: \.\COM4
[ -0.000] Detecting device
[ 4.032] ERROR: sahara_greet_device()->change_mode()->do_hello()->IO error
[ 4.032] Check qboot_log.txt for more details
[ 4.032] Total time: 4.032s
[ 4.032]
[ 4.032] qboot version 3.40
[ 4.032]
[ 4.032] DEVICE {
[ 4.032] name = "\.\COM4",
[ 4.032] flags = "0x64",
[ 4.032] addr = "0x61FE5C",
[ 4.032] api.bnr = "0x1B2DE8",
[ 4.032] }
[ 4.032]
[ 4.032]
[ 4.032] Backup & Restore {
[ 4.032] num_entries = 0,
[ 4.032] restoring = "false",
[ 4.032] backup_error = "not started",
[ 4.032] restore_error = "not started",
[ 4.032] }
[ 4.032]
And another question i have is, can i make a blankflash file for the g5plus?, i have another one working (in terrible condition) but it works and it has oreo.
Thanks in advance.
Click to expand...
Click to collapse
You can't make a blank flash file as it required Motorola digital signature, so if you are able to create one it won't work. But as you are having a other Moto g5+ then I think you can recover your device by using mmcblk0 method as it is the only way I know.
Here is the procedure of making mmcblk0
Below are the steps I followed to create a mmcblk0.img from a working device.
What is needed? -
a) A Working device of same model XT168x where 'x' could be 2,3,4,5,etc depending on region.
b) It should be a rooted one.
c) A working linux system. Any variant would do.
Steps to follow in working device:
1) Reboot device to TWRP recovery.
2) Take a backup of system,data and boot partitions. While taking backup, select the storage as Micro SDCard.
3) Once backup is complete, do a factory reset. This step is required as you don't want your friends personal files and settings.
3a) Power off the device.
4) Remove the SIM and existing SDCard.
5) Insert a new 32GB SDCard Class 10 UHS-1 into the device. This should be formatted as FAT32 or exFAT.
6) Boot the device.
7) Once booted, connect the device to computer using USB.
8) Open a terminal in your linux.
9) adb devices (This step assumes that adb and fastboot are in linux system path)
10) adb shell
11) su -
12) You are in root shell now.
13) cat /proc/partitions.
13a) Above step would list out all partitions.
14) Note the size of mmcblk0 partition.
15) Now run 'dd if=/dev/block/mmcblk0 of=/storage/<STORAGE-ID>/mmcblk0.img bs=1000000000 count=30' without quotes. 'bs' stands for block size. Here in the above command I am giving a block size of 1GB. In my case mmcblk0 partition size was nearly 30GB. So the above command worked for me. If you are experiencing problem, then play with the numbers. For example you could try decreasing the 'bs' value and increase the 'count' value. Ultimately 'bs' multiplied by count should be the partition size. If everything goes fine, you will have a mmcblk0.img in your sdcard. One more point to note. <STORAGE-ID> in the command is the place holder. The actual ID would be a hexadecimal value. You can get your storage id by doing a 'ls /storage' in root shell. In my case the SDCard was referred as 7368-9BEE.
16)Above step would take some time as it has to create a image of 30G size. Once complete, copy the image from SDcard to your computer.
17) Power off the device and remove the SDcard from device.
18) Insert your friend's SIM card and SDCard.
19) Boot to TWRP recovery.
20) Restore the backup you took in step 2 above.
After making mmcblk0 file put that sd card in the bricked device and boot into bootloader. Once you boot in bootloader Remove the sd card and flash stock ROM.

riyan65 said:
You can't make a blank flash file as it required Motorola digital signature, so if you are able to create one it won't work. But as you are having a other Moto g5+ then I think you can recover your device by using mmcblk0 method as it is the only way I know.
Here is the procedure of making mmcblk0
Below are the steps I followed to create a mmcblk0.img from a working device.
What is needed? -
a) A Working device of same model XT168x where 'x' could be 2,3,4,5,etc depending on region.
b) It should be a rooted one.
c) A working linux system. Any variant would do.
Steps to follow in working device:
1) Reboot device to TWRP recovery.
2) Take a backup of system,data and boot partitions. While taking backup, select the storage as Micro SDCard.
3) Once backup is complete, do a factory reset. This step is required as you don't want your friends personal files and settings.
3a) Power off the device.
4) Remove the SIM and existing SDCard.
5) Insert a new 32GB SDCard Class 10 UHS-1 into the device. This should be formatted as FAT32 or exFAT.
6) Boot the device.
7) Once booted, connect the device to computer using USB.
8) Open a terminal in your linux.
9) adb devices (This step assumes that adb and fastboot are in linux system path)
10) adb shell
11) su -
12) You are in root shell now.
13) cat /proc/partitions.
13a) Above step would list out all partitions.
14) Note the size of mmcblk0 partition.
15) Now run 'dd if=/dev/block/mmcblk0 of=/storage/<STORAGE-ID>/mmcblk0.img bs=1000000000 count=30' without quotes. 'bs' stands for block size. Here in the above command I am giving a block size of 1GB. In my case mmcblk0 partition size was nearly 30GB. So the above command worked for me. If you are experiencing problem, then play with the numbers. For example you could try decreasing the 'bs' value and increase the 'count' value. Ultimately 'bs' multiplied by count should be the partition size. If everything goes fine, you will have a mmcblk0.img in your sdcard. One more point to note. <STORAGE-ID> in the command is the place holder. The actual ID would be a hexadecimal value. You can get your storage id by doing a 'ls /storage' in root shell. In my case the SDCard was referred as 7368-9BEE.
16)Above step would take some time as it has to create a image of 30G size. Once complete, copy the image from SDcard to your computer.
17) Power off the device and remove the SDcard from device.
18) Insert your friend's SIM card and SDCard.
19) Boot to TWRP recovery.
20) Restore the backup you took in step 2 above.
After making mmcblk0 file put that sd card in the bricked device and boot into bootloader and flash stock ROM.
Click to expand...
Click to collapse
Are there any complications from using another phone's mmcblk0? I've read about this method in a few more threads here (maybe).

My bricked xt1687 that showed qusb_bulk, then Qualcomm HS-USB QDLoader 9008 wouldn't boot into bootloader, or anything else, hence the need for blankflash. OP's errors are normal, when the timing for getting the flash to connect are not exact. He needs to keep trying and eventually he'll get it to write. I purposely bricked one to get rid of the Z play bootloader, and it took 45 minutes of trying before it finally wrote.

psychopac said:
Are there any complications from using another phone's mmcblk0? I've read about this method in a few more threads here (maybe).
Click to expand...
Click to collapse
There should be no complications as I think so. As we are just using this to get bootloader. But there could be chances of losing IMEI on bricked device, nothing more than that.
---------- Post added at 03:20 PM ---------- Previous post was at 03:15 PM ----------
[email protected] said:
My bricked xt1687 that showed qusb_bulk, then Qualcomm HS-USB QDLoader 9008 wouldn't boot into bootloader, or anything else, hence the need for blankflash. OP's errors are normal, when the timing for getting the flash to connect are not exact. He needs to keep trying and eventually he'll get it to write. I purposely bricked one to get rid of the Z play bootloader, and it took 45 minutes of trying before it finally wrote.
Click to expand...
Click to collapse
I don't think the blank flash file is going to work now as we are now on Oreo on with latest firmware. So we need the latest blank flash file with latest bootloader in it.and I don't think we are having the latest bootloader in blank flash file. So I don't think so it will work.but giving a trying is not a problem.

riyan65 said:
There should be no complications as I think so. As we are just using this to get bootloader. But there could be chances of losing IMEI on bricked device, nothing more than that.
---------- Post added at 03:20 PM ---------- Previous post was at 03:15 PM ----------
I don't think the blank flash file is going to work now as we are now on Oreo on with latest firmware. So we need the latest blank flash file with latest bootloader in it.and I don't think we are having the latest bootloader in blank flash file. So I don't think so it will work.but giving a trying is not a problem.
Click to expand...
Click to collapse
I'm not sure that blankflash will not work, as I have a potter device on the addison bootloader that I was able to go from stock nougat to stock oreo via ADB. It still gives bootloader error when trying to write but is fully functional non-the-less.

[email protected] said:
I'm not sure that blankflash will not work, as I have a potter device on the addison bootloader that I was able to go from stock nougat to stock oreo via ADB. It still gives bootloader error when trying to write but is fully functional non-the-less.
Click to expand...
Click to collapse
Now it won't work as at the time of nougat the blank flash file contain Oreo bootloader, so it was able to recover, but now we are now on Oreo, so it won't work.

This just is not true. I just took my "test" phone which has twice been bricked before. It has stock oreo on it, and I hard bricked it to just flashing light and is recognized by pc as qusb_bulk. This phone has never been able to be recovered with potter blankflash, but does recover and rewrite bootloader with addison blankflash. I was able to use addison, then write the addison 2 potter files, and write back stock oreo rom. Whole process took about an hour this morning.

[email protected] said:
This just is not true. I just took my "test" phone which has twice been bricked before. It has stock oreo on it, and I hard bricked it to just flashing light and is recognized by pc as qusb_bulk. This phone has never been able to be recovered with potter blankflash, but does recover and rewrite bootloader with addison blankflash. I was able to use addison, then write the addison 2 potter files, and write back stock oreo rom. Whole process took about an hour this morning.
Click to expand...
Click to collapse
Is that device is having latest firmware 13-3 or it is having a old firmware???

It had the latest debloated rom on it, potter-OPS28.85-17-2-debloated.
I don't think the new stock oreo is dependant on a new bootloader, as I posted before, this device would always show errors trying to write new bootloader from stock adb rom, yet installed, and functioned perfectly. And also, blankflash loads into the processor at the beginning of the bootloader sequence, which is how we get the device out of it's "dead" state.

[email protected] said:
It had the latest debloated rom on it, potter-OPS28.85-17-2-debloated.
I don't think the new stock oreo is dependant on a new bootloader, as I posted before, this device would always show errors trying to write new bootloader from stock adb rom, yet installed, and functioned perfectly. And also, blankflash loads into the processor at the beginning of the bootloader sequence, which is how we get the device out of it's "dead" state.
Click to expand...
Click to collapse
I think the bootloader is same for Moto g5+ and Moto z play that why the blank flash file is working or else it didn't work at all, but we should kept a backup method also so we can able to recover it, if blank flash file don't work.

Need Blank Flash File
red002 said:
After doing a twrp backup of my phone because i wanted to sell it and recover my stuff, and it suddenly stopped working after trying powering on.
The PC recognized it as qusb_bulk, i downloaded the drivers for it. Now it shows as Qualcomm HS-USB QDLoader 9008, but i tried the blankflash for the g5plus (presumably nougat) and one for the z2play and both of them failed. Here's the log.
**** Log buffer [000001] 2018-12-01_22:19:03 ****
[ -0.000] Opening device: \\.\COM4
[ -0.000] Detecting device
[ 4.032] ERROR: sahara_greet_device()->change_mode()->do_hello()->IO error
[ 4.032] Check qboot_log.txt for more details
[ 4.032] Total time: 4.032s
[ 4.032]
[ 4.032] qboot version 3.40
[ 4.032]
[ 4.032] DEVICE {
[ 4.032] name = "\\.\COM4",
[ 4.032] flags = "0x64",
[ 4.032] addr = "0x61FE5C",
[ 4.032] api.bnr = "0x1B2DE8",
[ 4.032] }
[ 4.032]
[ 4.032]
[ 4.032] Backup & Restore {
[ 4.032] num_entries = 0,
[ 4.032] restoring = "false",
[ 4.032] backup_error = "not started",
[ 4.032] restore_error = "not started",
[ 4.032] }
[ 4.032]
And another question i have is, can i make a blankflash file for the g5plus?, i have another one working (in terrible condition) but it works and it has oreo.
Thanks in advance.
Update: just as @[email protected] says it took a long time before it finally flash, almost 2 hours, and got the bootloader, i flashed the last oreo firmware. The phone works fine now and i still have imei and 4G.
Thanks y'all for helping me.
Click to expand...
Click to collapse
Can you please provide the link for Blank Flash file that worked for you.

Hello, moto g5 plus is left alone with the led flashing and does not enter anything, does not start. To try to recover it with the BlankFlash tool, is it mandatory to have the bootloader unlocked? please i need your help to try to get it back. thanks

[+]RESTOCK - stock restore, repartition, repair and reset, including USB driver fix

RESTOCK is a new Nexus 7 2013 repair and factory reset tool for Windows. The NRT app (Nexus Root Toolkit) is similar but is old, closed-source, unsupported, abandoned, does no eMMC diagnostics and most importantly - it offers no repartitioning. Unlike NRT, Restock is specialized and optimized for Nexus 7'13 only, with streamlined operation and minimal user input.
If fastboot mode is available, then no matter what software problems like bootloops or softbricks are observed, or what custom ROM you had used before - Restock will restore your tablet to original, latest stock image, factory setup in 10 minutes (more time for one-off components download if necessary). Unforeseen issues should be reported in this thread and hopefully will be resolved within 24 hours.
If fastboot mode is not available, try the unbricking guide first.
For hardware issues, check this thread.
FEATURES
supports both flo and deb variants
small app download size (2.5MB)
automatic latest stock image (mob30x) and USB driver download from official google.com locations
robust, reliable USB device detection and driver installation - tested on Windows: XP-32, W7-32/64, W10-64(1809)
eMMC memory test and diagnostics
automatic device unlocking
option of repartition to original factory layout
- precise and reliable for any eMMC size, including 64GB and 128GB mods
- required for repartition scripts which check for original layout and flashing specific custom ROMs like e.g. Ubuntu Touch
- advised for selling in original factory condition and resolving difficult ROM flashing issues and starting from scratch
minimal user interaction and fully scripted auto-processing
the Restock script is open for inspection, corrections and improvements; post your comments and suggestions here
USAGE
download the attached zip file
unzip it
double-click on "restock.bat"
follow the prompts
SAMPLE OUTPUT
Code:
Nexus 7'13 Restock v1 @2019 k23m
SUPPORT - http://bit.ly/2C35sLZ
WARNING - installing factory image will ERASE ALL DATA from the device
Enter device name [flo OR deb]: flo
Downloading USB drivers and the latest factory image.
If not deleted, will not be downloaded again.
-- https://dl-ssl.google.com/android/repository/latest_usb_driver_windows.zip
Resolving dl-ssl.google.com... 74.125.24.190, 74.125.24.91, 74.125.24.93, ...
Connecting to dl-ssl.google.com|74.125.24.190|:443... connected.
WARNING: cannot verify dl-ssl.google.com's certificate, issued by 'CN=GTS CA 1O1,O=Google Trust Services,C=US':
Unable to locally verify the issuer's authority.
HTTP request sent, awaiting response... 200 OK
Length: 8682859 (8.3M) [application/zip]
Saving to: 'latest_usb_driver_windows.zip'
latest_usb_driver_windows.zip 14%[======> ] 1.21M 383KB/s eta 19s
...
-- https://dl.google.com/dl/android/aosp/razor-mob30x-factory-52684dff.zip
Resolving dl.google.com... 172.217.25.46
Connecting to dl.google.com|172.217.25.46|:443... connected.
WARNING: cannot verify dl.google.com's certificate, issued by 'CN=GTS CA 1O1,O=Google Trust Services,C=US':
Unable to locally verify the issuer's authority.
HTTP request sent, awaiting response... 200 OK
Length: 505296115 (482M) [application/zip]
Saving to: 'razor-mob30x-factory-52684dff.zip'
razor-mob30x-factory-52684dff 86%[=============================> ] 417.98M 410KB/s eta 2m 57s
...
1. boot the Nexus in fastboot mode: when OFF press POWER + VOLUME DOWN
2. when in the bootloader menu, connect it to your PC
3. wait a few seconds, then...
Press any key to continue . . .
...
...
INFO: Successfull installation of 'd:\restock\data\usb_driver\android_winusb.inf'.
INFO: Returning with code 0x1
Device not found...
1. disconnect it from PC
2. reboot to bootloader again
3. reconnect it to PC
Press any key to continue . . .
Verify...
eMMC test...
If it freezes here, the chip is faulty and needs replacement.
eMMC OK
Lock status...
GPT...
Partitions had been changed.
Restore original partitions? [y/n]: y
Wait...
sending 'bootloader' (3911 KB)...
OKAY [ 0.141s]
writing 'bootloader'...
OKAY [ 1.518s]
finished. total time: 1.658s
rebooting into bootloader...
OKAY [ -0.000s]
finished. total time: 0.008s
Wait...
sending 'gpt' (35 KB)...
OKAY [ 0.016s]
writing 'gpt'...
OKAY [ 0.109s]
finished. total time: 0.141s
rebooting into bootloader...
OKAY [ -0.000s]
finished. total time: 0.012s
If error, copy and post it, include restock.log
http://bit.ly/2C35sLZ
Note: Android flash takes 2 minutes, initial boot takes 7 minutes.
Press any key to continue . . .
sending 'bootloader' (3915 KB)...
OKAY [ 0.125s]
writing 'bootloader'...
OKAY [ 1.377s]
finished. total time: 1.502s
rebooting into bootloader...
OKAY [ 0.000s]
finished. total time: 0.007s
archive does not contain 'boot.sig'
archive does not contain 'recovery.sig'
archive does not contain 'system.sig'
--------------------------------------------
Bootloader Version...: FLO-04.08
Baseband Version.....: none
Serial Number........: xxxxxxxxx
--------------------------------------------
checking product...
OKAY [ 0.016s]
checking version-bootloader...
OKAY [ 0.000s]
sending 'boot' (7422 KB)...
OKAY [ 0.234s]
writing 'boot'...
OKAY [ 1.000s]
sending 'recovery' (8166 KB)...
OKAY [ 0.266s]
writing 'recovery'...
OKAY [ 0.328s]
erasing 'system'...
OKAY [ 1.143s]
sending 'system' (843549 KB)...
OKAY [ 26.516s]
writing 'system'...
OKAY [ 39.986s]
erasing 'userdata'...
OKAY [ 23.750s]
formatting 'userdata' partition...
Creating filesystem with parameters:
Size: 28856791040
Block size: 4096
Blocks per group: 32768
Inodes per group: 8192
Inode size: 256
Journal blocks: 32768
Label:
Blocks: 7045115
Block groups: 215
Reserved block group size: 1024
Created filesystem with 11/1761280 inodes and 154578/7045115 blocks
sending 'userdata' (139085 KB)...
writing 'userdata'...
OKAY [ 12.434s]
erasing 'cache'...
OKAY [ 0.437s]
formatting 'cache' partition...
Creating filesystem with parameters:
Size: 587202560
Block size: 4096
Blocks per group: 32768
Inodes per group: 7168
Inode size: 256
Journal blocks: 2240
Label:
Blocks: 143360
Block groups: 5
Reserved block group size: 39
Created filesystem with 11/35840 inodes and 4616/143360 blocks
sending 'cache' (10984 KB)...
writing 'cache'...
OKAY [ 0.891s]
rebooting...
finished. total time: 107.057s
Press any key to exit...
RESTOCK 2
SCRIPTS
restock.bat - the main script: stock install, repair, repartition and factory reset
addons.bat - install TWRP custom recovery, mob30x-fix1, root/Magisk, ElementalX-N7-6.17 kernel
fstrim.bat - faster eMMC writes: dispatches TRIM command for all unused filesystem blocks
safe-unlock.bat - unlock without data loss
getlog.bat - diagnostics #1
relog.bat - diagnostics #2
ADDONS
These addons should be installed immediately after RESTOCK and before Android setup:
TWRP deb/flo custom recovery (it must be flashed before the other addon options)
MOB30X-FIX1 - improved Android 6.0.1 stock MOB30X installation, info: https://forum.xda-developers.com/showthread.php?t=4021757 In short, it adds WiFi 'Skip' setup option and removes old GApps to increase space on the system partition
root/Magisk - https://github.com/topjohnwu/Magisk
ElementalX-N7-6.17 custom kernel - I recommend to preset "doubletap2wake" and "battery life extender". For car use also preset "USB OTG + charge mode", info: https://forum.xda-developers.com/showthread.php?t=2389022
ERRORS
If you see errors, copy and report them. Run getlog.bat and include "getlog.log" in your post. If possible, also run relog.bat and attach "relog-xxxxxx.zip" to your post.
FSTRIM
For optimal eMMC performance run fstrim.bat from time to time.
SAFE UNLOCK
Unlock your device without data loss. MiFlash is described in the Unbricking Guide:
https://forum.xda-developers.com/showpost.php?p=75360854&postcount=199
Do not proceed unless you have read the unbricking guide and downloaded all components.
OPTIONS
Try mob30x-fix1 for improved Android 6.0.1 stock installation.
Next consider CROSS : 1-click installation of secure, up-to-date Android 7-to-11 custom ROMs, including TWRP, repartition, root, etc. as easily as RESTOCK.
NOTE
If Android is stuck on boot logo, with TWRP flash k23m-persist-fix2.zip

Did not even realize this was new! Thanks for making such a wonderfull tool! Currently using it to flash flo, and it works great!
Will install lineage after this tho
Code:
1. boot the Nexus in fastboot mode: when OFF press POWER + VOLUME DOWN
2. when in the bootloader menu, connect it to your PC
3. wait a few seconds, then...
Press any key to continue . . .
Verify...
eMMC test...
If it freezes here, the chip is faulty and needs replacement.
eMMC OK
Lock status...
GPT...
If error, copy and post it, include restock.log
[url]http://bit.ly/2C35sLZ[/url]
Note: Android flash takes 2 minutes, initial boot takes 7 minutes.
Press any key to continue . . .
sending 'bootloader' (3915 KB)...
OKAY [ 0.131s]
writing 'bootloader'...
OKAY [ 1.581s]
finished. total time: 1.719s
rebooting into bootloader...
OKAY [ 0.009s]
finished. total time: 0.014s
archive does not contain 'boot.sig'
archive does not contain 'recovery.sig'
archive does not contain 'system.sig'
--------------------------------------------
Bootloader Version...: FLO-04.08
Baseband Version.....: none
Serial Number........: 07206d7c
--------------------------------------------
checking product...
OKAY [ 0.003s]
checking version-bootloader...
OKAY [ 0.004s]
sending 'boot' (7422 KB)...
OKAY [ 0.239s]
writing 'boot'...
OKAY [ 0.397s]
sending 'recovery' (8166 KB)...
OKAY [ 0.265s]
writing 'recovery'...
OKAY [ 0.448s]
erasing 'system'...
OKAY [ 0.743s]
sending 'system' (843549 KB)...
OKAY [ 26.422s]
writing 'system'...
OKAY [ 51.719s]
erasing 'userdata'...
OKAY [ 9.570s]
formatting 'userdata' partition...
Creating filesystem with parameters:
Size: 13342060544
Block size: 4096
Blocks per group: 32768
Inodes per group: 8144
Inode size: 256
Journal blocks: 32768
Label:
Blocks: 3257339
Block groups: 100
Reserved block group size: 799
Created filesystem with 11/814400 inodes and 91881/3257339 blocks
sending 'userdata' (137198 KB)...
writing 'userdata'...
OKAY [ 12.298s]
erasing 'cache'...
OKAY [ 0.051s]
formatting 'cache' partition...
Creating filesystem with parameters:
Size: 587202560
Block size: 4096
Blocks per group: 32768
Inodes per group: 7168
Inode size: 256
Journal blocks: 2240
Label:
Blocks: 143360
Block groups: 5
Reserved block group size: 39
Created filesystem with 11/35840 inodes and 4616/143360 blocks
sending 'cache' (10984 KB)...
writing 'cache'...
OKAY [ 1.029s]
rebooting...
finished. total time: 103.239s
Press any key to exit...

Dang that was timely.
It's a big hammer for what could sometimes be a small problem but it works quickly and perfectly. The alternative is pulling hair out for hours while trying to find the easy fix.
Thanks for sharing.

wow my nexus 7 was in boot loop and i had an old NRT tool which wouldnt work at all.
computer wouldnt detect next 7 2013 thru usb cable
cannot mount usb-otg in TWRP
boot loop in custom rom
your tool fixed it so fast and easy.
THANKS SO MUCH FOR YOUR TOOL!!!

Thanks for this k23m although I hope to never have to use it. My Kingston equipped Nexus 7 is still going strong and it's my most used android device. If I run the emmc memory test and diagnostics would it tell me if the emmc is about to die and determine its overall wear and health?

Tmzdroid said:
Thanks for this k23m although I hope to never have to use it. My Kingston equipped Nexus 7 is still going strong and it's my most used android device. If I run the emmc memory test and diagnostics would it tell me if the emmc is about to die and determine its overall wear and health?
Click to expand...
Click to collapse
Hello Tmzdroid, your Kingston was from a newer production batch and probably is OK but maybe do not try any major OS/ROM changes as this most recent case demonstrates. The eMMC generation used in N7 has no "SMART" flash wear diagnostics like in SSD. This feature was introduced in eMMC v5+. Restock can identify Kingston if it has standard partitions and checks for the terminal, most common, read-only condition Kingstons suffer from. In short, the test can not indicate eMMC degradation level. The only forewarning you may get is a period of slow-downs prior to going read-only. If you feel it is happening, do fastboot format cache and if it takes longer than 2 seconds, it is almost the end and time to get your data out of the tablet, while you still can.
:highfive:

Thank you for this! It fixed my deb model <3

I'm getting "Incorrect device" trying to use Restock to recover from flo-deb_clamor_repartition. It's definitely flo, I am looking at the bootloader right now. fastboot format cache completes in 0.086 seconds. flo 32G, rev_e, bootloader FLO-04.08, no carrier, secure boot enabled, lock state unlocked.
edit: got going again with https://forum.xda-developers.com/showthread.php?t=2381582

AiRMaX-360 said:
Thank you for this! It fixed my deb model <3
Click to expand...
Click to collapse
Thank you for confirming that it works on deb. I have 3 flo's but no deb to test.
drinkypoo said:
I'm getting "Incorrect device" trying to use Restock to recover from flo-deb_clamor_repartition. It's definitely flo, I am looking at the bootloader right now. fastboot format cache completes in 0.086 seconds. flo 32G, rev_e, bootloader FLO-04.08, no carrier, secure boot enabled, lock state unlocked. edit: got going again with https://forum.xda-developers.com/showthread.php?t=2381582
Click to expand...
Click to collapse
Would you be able to post a log from the attached script? Unzip and run it in Restock's folder.
:fingers-crossed:

k23m said:
Would you be able to post a log from the attached script? Unzip and run it in Restock's folder.
:fingers-crossed:
Click to expand...
Click to collapse
Strangely, it won't run unless I run as administrator. I double-click it and nothing happens. If I run as administrator then it runs in c:\windows\system32 and doesn't list the contents of the directory you want... I even tried moving restock's folder into my user dir instead of under downloads just in case something about the path was causing problems. No idea WTF that is about. Perms look good. I went ahead and just ran the commands manually from a CMD shell in the proper directory, looks like they produced the output you were looking for... except the find command doesn't work there. Maybe it would work in command.com, dunno.
I'm not sure how much help this will be since I used other tools since trying to use restock, but here it is anyway.

drinkypoo said:
Strangely, it won't run unless I run as administrator. I double-click it and nothing happens. If I run as administrator then it runs in c:\windows\system32 and doesn't list the contents of the directory you want... I even tried moving restock's folder into my user dir instead of under downloads just in case something about the path was causing problems. No idea WTF that is about. Perms look good. I went ahead and just ran the commands manually from a CMD shell in the proper directory, looks like they produced the output you were looking for... except the find command doesn't work there. Maybe it would work in command.com, dunno. I'm not sure how much help this will be since I used other tools since trying to use restock, but here it is anyway.
Click to expand...
Click to collapse
It seems your Path env exceeds the limit:
Code:
Path=C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Python27\;C:\Python27\Scripts;C:\ProgramData\Oracle\Java\javapath;C:\WinAVR-20100110\bin;C:\WinAVR-20100110\utils\bin;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\PuTTY;C:\Programs\Argyll_V1.7.0\bin;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\;C:\Program Files (x86)\GitExtensions\;C:\Program Files\Git\cmd;C:\Windows;C:\ProgramData\ComposerSetup\bin;C:\Program Files\Calibre2\;C:\Program Files (x86)\sbt\bin;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Windows\system32;C:\Users\drink\AppData\Local\Android\Sdk\platform-tools;C:\Program Files (x86)\GNU Tools ARM Embedded\5.4 2016q3\bin;C:\Users\drink\AppData\Local\Android\Sdk\platform-tools;C:\Program Files (x86)\Nmap;C:\Programs\ffmpeg-20190208\bin;C:\Program Files (x86)\Atmel\Flip 3.4.7\bin;c:\programs\fastboot;C:\programs;"%~dp0data"
My path has only:
Code:
Path=C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\
Please do:
Edit the path - Control Panel / System / Advanced System Settings / Advanced tab / Environment Variables button / in System Variables select Path / click Edit
copy original and save for reuse later
replace it with: C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\
save
reboot
run Restock
It should work now. As your N7 is already fixed, just close the window when it stops at "Note: Android flash takes 2 minutes, initial boot takes 7 minutes" and nothing will be flashed. Also, don't go ahead with "Restore original partitions? [y/n]" if it is offered.
If it still does not work, login to Windows with an admin account and then run Restock.

k23m said:
It seems your Path env exceeds the limit:
Click to expand...
Click to collapse
Sigh. Windows is garbage in so many ways.

I was just thinking I want to restore my Nexus back to 100% stock, and magically this recent thread appears. Worked perfectly. Thank you.

Strangely, only custom ROMs are working for me. I always get bootloop whenever I flash any of the razor Nexus Factory Images. I also tried the script you provided and finishes successfully, but when booting, it always end in bootloop with Google logo on it. I have access to fastboot and even can flash and boot to TWRP with no problemas. Any idea?
EDIT: Attached logs after re-running the script

bamsbamx said:
Strangely, only custom ROMs are working for me. I always get bootloop whenever I flash any of the razor Nexus Factory Images. I also tried the script you provided and finishes successfully, but when booting, it always end in bootloop with Google logo on it. I have access to fastboot and even can flash and boot to TWRP with no problemas. Any idea?
EDIT: Attached logs after re-running the script
Click to expand...
Click to collapse
It is a very interesting case. We need internal logs, please 'install' get-logs-sdcard.zip in TWRP, find 'logs.tgz' in the root of internal storage and post it here.

k23m said:
It is a very interesting case. We need internal logs, please 'install' get-logs-sdcard.zip in TWRP, find 'logs.tgz' in the root of internal storage and post it here.
Click to expand...
Click to collapse
Thanks for the quick reply, here I attach the logs... Seems like the /persist partition is empty, maybe thats the cause of the problem?
However, I can understand why that happened, maybe because I used the /system partition script for increasing its size...
EDIT: Somehow the XDA file uploader says invalid file for .tgz format, I recompressed the folder to a .zip file

bamsbamx said:
Thanks for the quick reply, here I attach the logs... Seems like the /persist partition is empty, maybe thats the cause of the problem?
However, I can understand why that happened, maybe because I used the /system partition script for increasing its size...
EDIT: Somehow the XDA file uploader says invalid file for .tgz format, I recompressed the folder to a .zip file
Click to expand...
Click to collapse
The 'persist' partition is not empty, you can see its contents in the log's 'ls_persist' file, but its SELinux contexts appear incorrect. Try this:
in TWRP backup your original 'persist' with the attached p4-backup-int.zip
go to my old post here, get those files and restore my 'persist' partition
boot stock ROM
:fingers-crossed:

k23m said:
The 'persist' partition is not empty, you can see its contents in the log's 'ls_persist' file, but its SELinux contexts appear incorrect. Try this:
in TWRP backup your original 'persist' with the attached p4-backup-int.zip
go to my old post here, get those files and restore my 'persist' partition
boot stock ROM
:fingers-crossed:
Click to expand...
Click to collapse
Still no luck. I have re-run the get-logs script and some file permissions have changed in le_persist (checked with a diff comparer), as well as new file called settings. Flashed factory image MOB30X and bootloop, then flash UnLegacy rom android 8.1.0 and boots with no problem. Cant understand what is happening... Maybe it is possible to use UART debugging to get some logs?
EDIT: Attached the new logs

bamsbamx said:
Still no luck. I have re-run the get-logs script and some file permissions have changed in le_persist (checked with a diff comparer), as well as new file called settings. Flashed factory image MOB30X and bootloop, then flash UnLegacy rom android 8.1.0 and boots with no problem. Cant understand what is happening... Maybe it is possible to use UART debugging to get some logs?
EDIT: Attached the new logs
Click to expand...
Click to collapse
This new log is much better. The timing was right and it had captured 'last_kmsg' with mob30x bootloop log, note:
Code:
[ 4.865234] init: Starting service 'logd'...
[ 4.873748] EXT4-fs error (device mmcblk0p23): ext4_mb_generate_buddy:741: group 1, 32282 clusters in bitmap, 32356 in gd
[ 4.873962] Aborting journal on device mmcblk0p23-8.
[ 4.874664] Kernel panic - not syncing: EXT4-fs (device mmcblk0p23): panic forced after error
...
[ 7.987304] Rebooting in 5 seconds..
[ 12.994476] Going down for restart now
[ 12.994628] in panic
It can't use mmcblk0p23 - the cache partition, and has to restart. New custom ROMs no longer use the cache partition and that's why they work. For comparison here is my 'last_kmsg' with mob30x...
Code:
[ 7.072235] EXT4-fs (mmcblk0p23): recovery complete
[ 7.077087] EXT4-fs (mmcblk0p23): mounted filesystem with ordered data mode. Opts: nomblk_io_submit,errors=remount-ro
[ 7.086883] fs_mgr: check_fs(): mount(/dev/block/platform/msm_sdcc.1/by-name/cache,/cache,ext4)=0: Success
[ 7.162567] fs_mgr: check_fs(): unmount(/cache) succeeded
[ 7.171722] fs_mgr: Running /system/bin/e2fsck on /dev/block/platform/msm_sdcc.1/by-name/cache
[ 7.264678] e2fsck: e2fsck 1.42.9 (28-Dec-2013)
[ 7.269744] e2fsck: /dev/block/platform/msm_sdcc.1/by-name/cache: clean, 23/35840 files, 4726/143360 blocks
[ 7.285522] EXT4-fs (mmcblk0p23): mounted filesystem with ordered data mode. Opts: barrier=1,data=ordered,nomblk_io_submit,errors=panic
[ 7.296874] fs_mgr: __mount(source=/dev/block/platform/msm_sdcc.1/by-name/cache,target=/cache,type=ext4)=0
...
[ 8.289031] init: Starting service 'logd'...
[ 8.302368] SELinux: Context u:object_r:cache_recovery_file:s0 is not valid (left unmapped).
[ 8.312286] SELinux: Context u:object_r:cache_private_backup_file:s0 is not valid (left unmapped).
[ 8.342254] init: (Loading properties from /system/build.prop took 0.01s.)
[ 8.348266] init: (Loading properties from /vendor/build.prop took 0.00s.)
[ 8.355133] init: (Loading properties from /factory/factory.prop took 0.00s.)
[ 8.369842] init: Starting service 'vold'...
[ 8.373321] logd.auditd: start
Run fastboot format cache and compare it to the 'sample output' from the first post.
There may be a partial eMMC hardware fault affecting the cache partition.
If you wish to investigate it with UART, please check my post on the subject.
:highfive:

k23m said:
This new log is much better. The timing was right and it had captured 'last_kmsg' with mob30x bootloop log, note:
Code:
[ 4.865234] init: Starting service 'logd'...
[ 4.873748] EXT4-fs error (device mmcblk0p23): ext4_mb_generate_buddy:741: group 1, 32282 clusters in bitmap, 32356 in gd
[ 4.873962] Aborting journal on device mmcblk0p23-8.
[ 4.874664] Kernel panic - not syncing: EXT4-fs (device mmcblk0p23): panic forced after error
...
[ 7.987304] Rebooting in 5 seconds..
[ 12.994476] Going down for restart now
[ 12.994628] in panic
It can't use mmcblk0p23 - the cache partition, and has to restart. New custom ROMs no longer use the cache partition and that's why they work. For comparison here is my 'last_kmsg' with mob30x...
Code:
[ 7.072235] EXT4-fs (mmcblk0p23): recovery complete
[ 7.077087] EXT4-fs (mmcblk0p23): mounted filesystem with ordered data mode. Opts: nomblk_io_submit,errors=remount-ro
[ 7.086883] fs_mgr: check_fs(): mount(/dev/block/platform/msm_sdcc.1/by-name/cache,/cache,ext4)=0: Success
[ 7.162567] fs_mgr: check_fs(): unmount(/cache) succeeded
[ 7.171722] fs_mgr: Running /system/bin/e2fsck on /dev/block/platform/msm_sdcc.1/by-name/cache
[ 7.264678] e2fsck: e2fsck 1.42.9 (28-Dec-2013)
[ 7.269744] e2fsck: /dev/block/platform/msm_sdcc.1/by-name/cache: clean, 23/35840 files, 4726/143360 blocks
[ 7.285522] EXT4-fs (mmcblk0p23): mounted filesystem with ordered data mode. Opts: barrier=1,data=ordered,nomblk_io_submit,errors=panic
[ 7.296874] fs_mgr: __mount(source=/dev/block/platform/msm_sdcc.1/by-name/cache,target=/cache,type=ext4)=0
...
[ 8.289031] init: Starting service 'logd'...
[ 8.302368] SELinux: Context u:object_r:cache_recovery_file:s0 is not valid (left unmapped).
[ 8.312286] SELinux: Context u:object_r:cache_private_backup_file:s0 is not valid (left unmapped).
[ 8.342254] init: (Loading properties from /system/build.prop took 0.01s.)
[ 8.348266] init: (Loading properties from /vendor/build.prop took 0.00s.)
[ 8.355133] init: (Loading properties from /factory/factory.prop took 0.00s.)
[ 8.369842] init: Starting service 'vold'...
[ 8.373321] logd.auditd: start
Run fastboot format cache and compare it to the 'sample output' from the first post.
There may be a partial eMMC hardware fault affecting the cache partition.
If you wish to investigate it with UART, please check my post on the subject.
:highfive:
Click to expand...
Click to collapse
Yeah, I had the idea of checking last_kmsg just after my previous post. Saw that mounting mmcblk0p30 was causing kernel panic. Ran TWRP Format Cache and err well... Bootloop was now in the boot animation (maybe I had to reflash factory image, which I didnt). Didnt see about mmcblk0p24, will format cache and post feedback. Thank you!
:highfive:

Android 11 FAILED Help!

I'm having a hard time rooting via magisk. I follow this tutorial https://www.xda-developers.com/google-pixel-4-root-magisk/amp/
When I get to the point of
Code:
fastboot flash boot patched.img
Code:
Warning: skip copying boot image avb footer (boot partition size: 67108864, boot image size: 100663296).
Sending 'boot_a' (98304 KB) OKAY [ 2.603s]
Writing 'boot_a' (bootloader) Image missing cmdline or OS version
FAILED (remote: 'Failed to write to partition Bad Buffer Size')
fastboot: error: Command failed

Hello @half_android ,
You are using very old info ..
Please visit: The new threads here on the forum like:
[Discussion] Magisk - The Age of Zygisk.
This is a discussion and help thread for the newer versions of Magisk. The main goal of this thread is to help users migrate to Magisk v24+ SafetyNet Basic integrity Pass CTS profile match Pass Play Protect certification Device is certified...
forum.xda-developers.com