yashsingh1/xdaforums huggingface dataset:
[Nexus 6P General] tenfar:
for other device ，we can format sbl1 to force to let the device thinks that the emmc chip is empty.then it will boot into edl mode. but i did't test with Nexus 6p. we can't get into edl mode with usb cable or buttons. i am afraid that my device brick again. if someone who willing to test it . but there is a chance that you will brick your nexus 6p totaly. and must fix with open up the device.
[Nexus 6P General] blackcell1:
I'm currently sat on 4 nexus 6p's all locked with December 2016 frp. locked bootloader and stock recovery. if you can show us any method to format the sbl1 then ill happily test it on one of the devises !
[Nexus 6P General] dato02:
same here :D but bootloader is unlocked.
[Nexus 6P General] 5.1:
Try:

fastboot format sbl1

Or

fastboot erase sbl1

Locked I'm not sure...

Hopefully it won't kill your phone... :rolleyes:
[Nexus 6P General] dato02:
permission denied. maybe adb will work tho. i have twrp on the phone but dont know adb commands. had already tried fastboot format sbl1 and after your post erase as well but permission denied it is through fastboot.
[Nexus 6P General] 5.1:
Try this in command prompt while in adb sideload..:

adb devices

If recognized:

adb shell

dd if=/dev/zero of=/dev/block/platform/soc.0/f9824900.sdhci/by-name/sbl1 bs=16384

I'm not responsible for any damage though since i'm not sure this is the proper command... :P
[Nexus 6P General] tenfar:
if you can enter bootloader there are chance that ,there is another way to unlock the bootloader ,but still need to be figure out. there are some fastboot commands and some modes that huawei provided.

for the bootloader there is a command call fastboot oem hwdog certify begin and fastboot oem hwdog certify end. this two command is for fastboot oem frp unlock. or erase.

but we will need the hwdog. after unlock you can flash a factory bootloader, that bootloader is a super bootloader ,no unlock needed. with that bootloader you can do anything.the bootloader version is 02.50L. if i remember correctly.but for now it's no help with those devices.since we dont have the hwdog.
[Nexus 6P General] dato02:
i entered the adb command and im in eld mode but there's a problem :D miflash wont start flashing and in emmc there's error that is know already http://prntscr.com/ecs0to

edit: there's also that http://prntscr.com/ed5y1u
[Nexus 6P General] blackcell1:
I'll have to test these commands on Monday, I know I'm limited with commands being as the devices are frp but all help is great full!
[Nexus 6P General] tenfar:
the picture your show is qpst and driver install, use miflash ,not qpst.
[Nexus 6P General] blackcell1:
after typing the "fastboot oem hwdog certify begin" it returns this

Phone 1#

(bootloader) FBLOCK7b390a2915fce5f7

Phone 2#

(bootloader) FBLOCKb114609f9df45d9c

Phone 3#

(bootloader) FBLOCK70fa2cd2996eba22

from that im unsure on what i need to do next.

also tried

C:\adb>fastboot oem frp-unlock
...
FAILED (remote: NO1)
finished. total time: 0.013s

update: I've figured how to remove November's FRP. just testing it with the second phone and ill post the steps
[Nexus 6P General] singularoctopi:
Can't wait to see what you figured out, I'll try anything on my bootlocked bootlooping N6P.
[Nexus 6P General] blackcell1:
the phone i removed it FRP was the November security patch and as far as i know there's been an exploit from ghostlyhacks (YouTube) but ive been trying to retrace the commands i used to erase FRP via fastboot. i cant test it on the other two 6p's as ones on December and the other is on February. i guess if theirs anyone on November 2016 frp they could test my commands ? (as well as i can remember them, i didn't expect them to work so some might be pointless)

fastboot oem hwdog certify begin
fastboot flashing get_unlock_ability
fastboot erase config
fastboot reboot

im really annoyed with myself that i didn't note what commands i used and as i said before i was just messing around and really didn't expect it to work.

update: working on the December phone today, the difference between my 2nd phone (January) is that they've disabled the option to enter bp-mode and hw-mode via the bootloader or using these two commands,

oem enable-bp-tools
oem enable-hw-factory

so im guessing theirs and exploit to abuse here, tho each time i use these commands and reboot the phone just hangs on the google logo (first i tough it would open a port for me to send a command or two but nope)

and I've found this page with an interesting pdf from IBM attacking the nexus 6 and 6p bootloaders.
[Nexus 6P General] blackcell1:
I will find a method to remove frp, more news coming soon
[Nexus 6P General] dato02:
couldn't get miflash work but qfil in qpst v430 did work for me. i did flat build flash and device started. it's funny but when i flashed twrp and entered it, it asked for psw. i just rebooted to bootloader and flash-all ed but no help. it's still bootlooping. it was worth trying tho. thank you for all your help.

edit: funnies thing to me is that after all this all the wipes supersu folder with it's items still sits in /
[Nexus 6P General] vcharette:
Hi Tenfar,

I have a Nexus 6P (unlocked bootloader). Today I flashed the latest final release of the factory image. Started the updates through the play store and 20 minutes later the phone wouldn't turn on anymore. It's been on a black screen ever since.

I tried using QFIL and XiaoMiFlash without any luck using your nexus6p_fix_bricked package. I've tried rebooting the phone in many different ways (holding different combination of buttons). Drivers are installed and QDLoader 9008 shows up. I don't have a red flashing light (I have no lights at all - no vibrations either).

XiaoMiFlash complains about no hello packets. I know you said this is linked to no EDL mode but I read somewhere that EDL mode is not needed on an unlocked bootloader.

When using QPST Configuration I am able to see COM3 - Q/QCP-XXX (Sahara Download). Q/QCP-XXX ESN=*Download* Phone Number=*Download* Banner=*Download*

Thanks!
[Nexus 6P General] dato02:
i used this version of qpst to flash stuff as a flat build and it's from this post. i still have bootloop of death but can enter fastboot and recovery again so that's that :p
[Nexus 6P General] vcharette:
You used a a stock firmware for another phone (Lenovo from the thread)?
[Nexus 6P General] vcharette:
I attached my QFIL log after trying from the thread you posted.

It's weird because we can see some steps are going through. And some .img files are written successfully. But at one point they all fail.

FireHose NOP sent successfully

Sending Configuration

Device Type:eMMC

Platform:8x26

FireHose Log: Host's hash buffer size not provided or 0; using 8192

FireHose Log: fh.attrs.MaxPayloadSizeToTargetInBytes > FIREHOSE_CHANNEL_BUFFER_SIZE

FireHose Log: Calling hotplug_poll_device('MMC')

Invalid response NAK

Set TxBuffer 0x8000, RxBuffer 0x4000

Firehose configure packet sent successfully!

Program Size: 0.13 MB

PROGRAM: Partition 0, Sector: 189096, Length: 8760 Sectors, Sector Size: 512 Bytes

File: D:\nexus6p\aboot.img

FireHose Log: start 189096, num 8760

FireHose Log: Finished sector address 197856

PROGRAM: Written Bytes 0x447000 (64)

I'm getting STORAGE_WRITE_FAILURE. The eMMC storage has probably gone bad... :(
[Nexus 6P General] dato02:
noo. i used that version of qpst to flash files from this thread. there's also q&a about different versions of qpst's getting errors.

---------- Post added at 12:46 AM ---------- Previous post was at 12:43 AM ----------

i used qpst from there not the files for the phone. don't use lenovo files, only use qpst from there. i had success with that qpst v430.
[Nexus 6P General] vcharette:
I tried that (430) version of QPST with far's "nexus6p_fix_bricked" and another one and both fail with STORAGE_WRITE_FAILURE. Really looks like a emmc storage issue. I'll look at the QA.
[Nexus 6P General] rmorris003:
Thanks for this thread, it saved mine after I used Flashfire to flash the bootloader and modem after upgrading to 7.1.2. I used QFIL to restore and then the official 7.1.2 package with fastboot.
[Nexus 6P General] edhaas:
For me, Flashfire didn't work after using QFIL. I did eventually get my 6P back after bricking. Here is a link to what I did for those who are stuck.

Good Luck!
[Nexus 6P General] droidan:
Sorry for posting in wrong thread,

By any chance does anyone have firehose and rawprogram/patch0 files for Google Pixel?
[Nexus 6P General] blackcell1:
not only are you in the wrong thread, your in the wrong device thread...

pixel Q&A

https://xdaforums.com/pixel/help

general android Q&A

https://xdaforums.com/android/help

general hacking Q&A

https://xdaforums.com/android/software-hacking
[Nexus 6P General] Clarkeofcurtis:
Hi there, I had no success using Miflash, or Qfil, I'm presented with this error?

Any help please and thank you!
[Nexus 6P General] Ben_Hurley:
Ok I am not alone on this issue.

Phone specs: Nexus 6p bought in US 32gb h1511, never rooted. No modifications software and hardware.

Issue: Sudden shutdown while charging, and can't be turned on anymore.

Workarounds: Power + any volume combination - nothing happened. Flashing wih QFIL only getting errors such as, sahara unable to read packet header or sometimes device not in firehose mode. Charge overnight nothing happened. Let it sit for a week without charging and charge it back still nothing happened on the screen. Nothing means zero!

Last Workaround: Send the phone for RMA but phone was sent back by DHL because it is already forbidden to send now via courier gadgets with batteries. I am sending it from Germany btw to USA . Now hopeless because warranty will expire in May 2017.

Phone status: When connected to Laptop device manager shows Qualcomm QDLoader 9008

Flashfiles used: Tenfars nexus6p brick file using different versions of QFIL. and Miflash. All having the same errors unable to read packet header.

Sitting here, waiting for miracle to happen.
[Nexus 6P General] Ben_Hurley:
Can you please elaborate more on this? Thanks!
[Nexus 6P General] tech_head:
Send it via FedEx or USPS with tracking. Those still accept devices.
[Nexus 6P General] datsoy:
Using latest qfil which now support sparse img I think, and provided rom by tenfar in op my phone is alive again.. Thank you so much! :svetius: :highfive:
[Nexus 6P General] 5.1:
Hello...

What qpst version did you install? Might help others in the future... :good:

Cheers...
[Nexus 6P General] datsoy:
I use version QPST 2.7.453
[Nexus 6P General] 5.1:
Hey...

Ok. I have this one as well. How did you end up in EDL mode by the way?
[Nexus 6P General] datsoy:
As I remembered, I hold down volum up upon connecting phone to pc without releasing it, as the flash is continuing. Im afraid it will fail so I dont release holding it until it finishes lol,.. with miflash I always ended with no programmer, and with some versions of qpst I got error something about cant set to firehose mode.

edit:

Maybe I just get lucky to be in edl mode? I really dont know.
[Nexus 6P General] 5.1:
Your phone broke at some point... So you ended up in this state. Was it a bad flash? Wrong firmware?

Glad you sorted it out anyway..! :good:
[Nexus 6P General] datsoy:
I messed, a bad flash with bootloader using Flashfire. lol

yeah! thanks. :D
[Nexus 6P General] Falitheman:
I've tried all the solutions on here but i keep coming up with a common problem qfil says it can't connect COMPORT. Anyone know whats going on? I installed all the drivers and the computer recognizes it as QDloader 9008. I have no idea how to get into edl mode tho everyone says to hold the volume up button and then plug in but nothing happens on my phone, all it does is connect as QDloader.

---------- Post added at 09:57 PM ---------- Previous post was at 09:54 PM ----------

samething happened to me, can you explain in detail on how you fixed this?
[Nexus 6P General] 5.1:
Also tenfar said it is supposed to work using miflash and not qfil.

Did you try holding volume up, plug your device and flash with miflash?
[Nexus 6P General] Falitheman:
i just tried that and im getting the same error as i had before
[Nexus 6P General] 5.1:
Hey,

I'm really sorry, i don't know what else to do at this point. The answer must be very simple though. :(

Good luck...
[Nexus 6P General] GohanBurner:
I don't understand the instructions to get into edl mode. My 6P is software bricked. I can get into the bootloader and stock recovery, however I cannot flash anything. I try to flash OTA updates and I get a "eMMC: unexpected contents" error. Phone boots up fine but is presented with an encryption message that I cannot bypass.
[Nexus 6P General] 5.1:
Hello,

Unless you flash a custom kernel or custom ROM, you can't boot to EDL. Phone boot itself in EDL after what seems like a bad flash or something else?!

Is your bootloader unlocked?

What is this encryption message you are talking about?

How did it happen? Imran, what triggered this message?

Good luck...
[Nexus 6P General] GohanBurner:
Bootloader is locked...

Phone seems to be on MMB29M build. Pretty old.

Phone boots, but says that I need to perform a factory reset to unlock the phone because encryption was unsuccessful. I factory reset and I get the same message.

This is where I'm at right now. I need to find a way to flash a full OTA but it won't let me. Fails at 53% and gives me that eMMC: unexpected contents error. Same goes for incremental OTAs.
[Nexus 6P General] 5.1:
Hey,

Someone had a similar issue after trying to encrypt his phone. I don't think the issue has been solved...

What OTA did you try?

What adb do you use? If not the latest, download official from Google here: https://dl.google.com/android/repository/platform-tools-latest-windows.zip

Try again with this one and latest OTA.from Google site.

Good luck...
[Nexus 6P General] rr5678:
Well, I had my bit of fun......mainly bricking my phone in the name of "science". It was an adventure and a half, but I did get the phone working. The only problem was that XiaoMiFlash kept giving me that "couldn't read hello packet" error so I had to get it working a different way. It was actually a reply in this thread that got me going again.

So here I am, with a working phone again. With the OP's permission, I'd like to re-write the guide so that nobody else goes through that same adventure and a half that involved me staying up until 6AM.
[Nexus 6P General] 5.1:
Hello,

Why not simply posting the steps right here. This way others can benefit of this right now. :good:

I guess [MENTION=540283]tenfar[/MENTION] will update the OP if necessary.

Cheers...
[Nexus 6P General] jaspreet singh mehmi:
[MENTION=540283]tenfar[/MENTION]

Can we use edl cable for nexus 6p to get into edl mode, its for all qualcom devices as its mention somewhere on web but m not sure this works with nexus devices...
[Nexus 6P General] NekoOtoko:
I'm pretty sure I've tried to do that using EDL cable I made for Xiaomi, but failed. Same applied to Motorola Qualcomms which I've tested.
[Nexus 6P General] jaspreet singh mehmi:
Modified bootloader for 6p

[MENTION=540283]tenfar[/MENTION] Do u have any customised/modified bootloader? Coz i can't get into edl mode through stock bootloader, i tried all commands in fastboot it says permission denied, my phone stucked into bootloop and i only can access to fastboot mode, no trwp and stock recovery is working and my bootloader is unlocked, i flash factory image its done but still phone can't pass Google logo..
[Nexus 6P General] tenfar:
https://xdaforums.com/nexus-6p/orig-development/tool-bootloader-extra-commands-nexus-6p-t3564086 try this.
[Nexus 6P General] jaspreet singh mehmi:
Bro same problem with my Nexus can u guide me how u manage to put into right download mode
[Nexus 6P General] artikle:
For people unable to get into the correct download mode, while QFIL is running and everything is setup, connect the phone. Once you hear the windows "device connected" sound, press the power button and keep pressing the power button till you hear the "device disconnected" sound and red light will be blinking on the notification led on phone. Now you will be able to flash the files in QFIL which will let you get into fastboot and from there you can flash the factory image. The getting into the red led mode is hit and miss. Try it several times and you will hopefully get it. Took me a whole day to figure this out. Good luck
[Nexus 6P General] jaspreet singh mehmi:
I did same thing but no red light blinking, i can here sound device disconnected and connected..

Do we need to disconnect device ? Or it should be plugged in all time in this process
[Nexus 6P General] amcferrin90:
I didn't have to get into the "right" EDL mode. There seems to be two methods to recover. The one that Tenfar posted and then the method that I as well as a few others have posted which starts with Tenfar's method. The methods were pretty clear IIRC. If when you plug your phone in you hear the device connected sound, check device manager under COM ports and see what device shows. I had to right click and update driver manually to the one that Tenfar proposed. Over all my testing and trying different methods, the drivers got all boogered up.

Plug your device in, device connected sounds at some point. What is your device doing? When in EDL mode either 9006 or 9008 the device lacks any knowledge to charge the battery. That's because there's a program that runs in normal mode that charges the battery. Pretty freaking cool! NOT! My device would have a red low battery charge LED illuminate and after a few minutes then the device connected sound. Now device shows under COM ports in device manager. Keep this in mind, pressing power does nothing. Holding power, does nothing because the battery is dead. Any time the phone reboots, it has to go through the 3-6 minute charge-up before it shows.

Then you perform the Tenfar provided steps to recover. Maybe that will work. Along the way you may get the same error I got. Then be prepared with the tools I posted to continue from that point. It works out of pure accident. Once the device flashes, it goes through several reboots that could take a few minutes. Again the dead battery but now the phone knows how to charge the battery. At that point put it on a charger, like a fast charger.

If you're in Fastboot or bootlooping to Fastboot and not EDL like one of your posts said, you may have the memory problem. If you can stay in fastboot, there are commands to work on the many partitions that are there, something like 40.
[Nexus 6P General] jaspreet singh mehmi:
I tried coustom bootloader given by tenfar and m able to achieve edl mode its showing under ports 9008.. but its not in right edl mode thats why all things happening.. i have all tools drivers installed, i tried 30s pressing power button method to get into right edl, qlif and miflash giving errors.. ok i will manually update select driver and try hope it works
[Nexus 6P General] gummer88:
Last night I connected my 6P to the charger, the next time I picked it up, it was dead, black screen, no boot, no lights, nothing.

I tried the steps on the OP with no luck on MiFlash, cannot receive hello packet, then started trying with QFIL after many tries finally I was able to flash it, QFIL says: "All finished successful", "Download Succeed" and "Finish download"; but the phone is still in the same state.

I tried MiFlash again having the same "cannot receive packet" error, now I don't know what to do next after flashing it with QFIL.

I can't access via fastboot, MiFlash doesn't flash, QFIL flashes but phone is still dead. What do you suggest me to do???

Thank's in advance.
[Nexus 6P General] amcferrin90:
Sorry for the long delay. I get many notifications and they just become a blur. If you still have this problem, with the phone plugged in, what is shown in device manager? Do you get any sound notification when you plug in or remove the phone? There is the problem with phones randomly going dead that this probably won't fix.
[Nexus 6P General] gummer88:
It shows Qualcomm HS-USB QDLoader 9008 (COM3) and windows sounds when connected, it is shown on QFIL and XiaoMiFlash
[Nexus 6P General] firtermish:
I'm on the same boat. My N6P shows up on devices and is recognized by the computer, but when I try to flash it usin QFIL I get a "Firehose fail" or "Sahara FailSahara Fail"message. Can't flash it with Miflash either.
[Nexus 6P General] mivec1756:
nexus 6p BLOD

Hi good day my nexus 6p has bootloop of death. Stuck at google logo. i tried flashing back to stock nothing. custom roms nothing. i can lock and unlock the bootloader and boot into twrp recovery( i cant access stock recovery) i tried flashing the rom from the first post using miflash getting and error [0.32 8XV7N15B24003351]:error:FAILED (remote: Permission denied!) download mode ENABLED

LOG

[0.02 8XV7N15B24003351]:image path:D:\6p

[0.05 8XV7N15B24003351]:env android path:C:\XiaoMi\XiaoMiFlash\Source\ThirdParty\Google\Android

[0.09 8XV7N15B24003351]:script :D:\6p\flash_all_except_storage.bat

[0.15 8XV7N15B24003351]:Physical Memory Usage:2191360 Byte

[0.27 8XV7N15B24003351]:C:\XiaoMi\XiaoMiFlash>"C:\XiaoMi\XiaoMiFlash\Source\ThirdParty\Google\Android\fastboot.exe" -s 8XV7N15B24003351 flash tz D:\6p\images\tz.mbn

[2.06 8XV7N15B24003351]:target reported max download size of 494927872 bytes

[2.09 8XV7N15B24003351]:sending 'tz' (1024 KB)...

iaoMi\XiaoMiFlash\Source\ThirdParty\Google\Android\fastboot.exe" -s 8XV7N15B24003351 flash dbi D:\6p\images\sdi.mbn

[2.15 8XV7N15B24003351]:eek:KAY [ 0.055s]

lash>"C:\XiaoMi\XiaoMiFlash\Source\ThirdParty\Google\Android\fastboot.exe" -s 8XV7N15B24003351 flash sbl1 D:\6p\images\sbl1.mbn

[2.17 8XV7N15B24003351]:writing 'tz'...

[2.20 8XV7N15B24003351]:FAILED (remote: Permission denied!)

[2.23 8XV7N15B24003351]:process exit.

[2.26 8XV7N15B24003351]:error:FAILED (remote: Permission denied!)

any advice?
[Nexus 6P General] note3userr:
I'm on the same boat as above. Phone doesn't respond to anything and under device manager is showing up as 9008 COM3.

installed everything and miflash fails to receive hello packet and qfil either has a sahara fail or sometimes it passes that but fails firehose

Please help.
[Nexus 6P General] apples1678:
Hello, is there any known fix for this?

[0.00 COM6]:[COM6]:start flash.
[2.01 COM6]:cannot receive hello packet,MiFlash is trying to reset status!
[4.52 COM6]:cannot receive hello packet,MiFlash is trying to reset status!
[7.03 COM6]:try to reset status.
[7.53 COM6]:Switch mode back
[7.54 COM6]:cannot receive hello packet,MiFlash is trying to reset status!
[7.56 COM6]:eek:bject reference not set to an instance of an object.

I was able to use the provided files to run QIFL ("Download Succeed" message after processing for a few minutes), however I see no change in the phone behavior. MiFlash continues to fail with the above. I've tried different USB ports, cables, plug/unplug, hold combinations of buttons, etc. But it fails every time.

Anyone have any ideas?
[Nexus 6P General] abhishekmaity:
I am having the same issue recently. My device froze while I was using it and have not turned on since. It gets detected as Qualcomm HS-USB QDLoader 9800 (COM3) in device manager when I connect it to PC. Tried flashing the rom provided by [MENTION=540283]tenfar[/MENTION] using MiFlash, couldn't receive hello packet. Tried flashing the same with QFIL, it ran for a while and ended up with this error:

What does this mean? Is my device beyond recovery? :( :crying: