Database Users

[Q] Nexus 7 Can't Unlock Bootloader, Bricked with No ADB Access

I've been searching for hours here but can't find a solution that works...
My wife's Wi-Fi Nexus 7 (running stock, unrooted) suddenly got stuck in a boot loop during the white Google logo (never gets to the Nexus "X" animation). I figured I'd simply restore to stock through fastboot/adb.
The problem is when I try to unlock the bootloader (which is needed to be able to flash the factory image) I get this error message:
Code:
(bootloader) erasing userdata...
(bootloader) erasing userdata done
(bootloader) erasing cache...
(bootloader) erasing cache done
(bootloader) unlocking...
[COLOR="Red"][B]FAILED (remote: ()[/B][/COLOR]
finished. total time: 2.736s
Because of this, I can't go any further. I can't flash anything because it tells me I need to unlock the bootloader. I tried a couple of different toolkits with the same results.
I get fastboot access, and the device is listed when I type "fastboot devices" but I don't get adb access. When I type "adb devices" I simply see:
Code:
>adb devices
List of devices attached
...and nothing else. No devices listed. If I try other adb commands, I get "error: device not found".
I've tried installing the Google drivers as well as other USB drivers from toolkits. No change. But I can send it commands through fastboot fine.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
I can get into recovery, but can't flash anything. I am able to factory reset from recovery, but it doesn't help. The tablet just keeps boot-looping.
Am I screwed? Any ideas? Thanks in advance to anyone who responds

I had to put mine in PTP mode to get it recognized. I also had a heck of of time getting the drivers installed correctly. I had to un-install and re-install several times before it worked correctly

bigdaddy619 said:
I had to put mine in PTP mode to get it recognized. I also had a heck of of time getting the drivers installed correctly. I had to un-install and re-install several times before it worked correctly
Click to expand...
Click to collapse
What's PTP mode? Were you having the same issue I'm having?
The thing is my tablet is getting recognized, at least in fastboot. Just not in adb but I'm thinking that's because it never had debugging turned on.

Wrong input.

grisoxxl said:
If you can acces recovery make full wipe.
Click to expand...
Click to collapse
Already did that several times. Doesn't help Still stuck in a boot loop and still can't unlock the bootloader to try to flash stock image.

ecaggiani said:
Already did that several times. Doesn't help Still stuck in a boot loop and still can't unlock the bootloader to try to flash stock image.
Click to expand...
Click to collapse
Why don't you flash the Google stock firmware?
Edit: i don't think unlock is necessary for flashing Google stock image
Sent from my Nexus 7 using xda premium

ganeshp said:
Why don't you flash the Google stock firmware?
Edit: i don't think unlock is necessary for flashing Google stock image
Click to expand...
Click to collapse
That's what I'm trying to do! The guides I've seen have me unlock the bootloader to be able to flash stock firmware. Can you point me to a guide? Is there an RUU maybe?

ecaggiani said:
Am I screwed?
Click to expand...
Click to collapse
Most likely. Is it still in Warranty? (The tab should be less than 1 year old)
The whole narrative smells like some kind of failure with the EMMC flash memory chip.
There's no point in fooling with adb. It only exists in the booted OS or a custom recovery, and you have neither.
Sorry... but you should probably be contacting Asus at this point.

bftb0 said:
Most likely. Is it still in Warranty? (The tab should be less than 1 year old)
The whole narrative smells like some kind of failure with the EMMC flash memory chip.
There's no point in fooling with adb. It only exists in the booted OS or a custom recovery, and you have neither.
Sorry... but you should probably be contacting Asus at this point.
Click to expand...
Click to collapse
Yeah I was afraid of that. Thanks for the response. I'll be contacting either Google or ASUS soon.

ecaggiani said:
Yeah I was afraid of that. Thanks for the response. I'll be contacting either Google or ASUS soon.
Click to expand...
Click to collapse
Hi, im having the exact problem you're having, did you end up contacting ASUS? how was your experience like? Did you get it resolved? I think I voided my warranty by trying to pull the battery ):

Hi all,
I've also got what seems to be a similar problem.
I've tried many (all?) the options to get this thing unlocked.
All I get is:
Code:
fastboot oem unlock
...
(bootloader) erasing userdata...
(bootloader) erasing userdata done
(bootloader) erasing cache...
(bootloader) erasing cache done
(bootloader) unlocking...
FAILED (remote: (Unknown error code))
finished. total time: 4.753s
or if I try a factory flash:
Code:
fastboot flash bootloader bootloader-tilapia-4.13.img
sending 'bootloader' (2096 KB)...
FAILED (remote: Bootloader is locked.)
finished. total time: 0.013s
Also a "restart bootloader" from the recovery screen or
Code:
fastboot reboot-bootloader
takes me to a blank screen.
Holding the power button to reset the Nexus then the power + Vol Down takes me back to recovery with no change.
(I'm looking at this for a friend so not sure exactly what he did, but I doubt it was anything major!)
the machine vars are:
Code:
fastboot getvar all
(bootloader) version-bootloader: 4.13
(bootloader) version-baseband: N/A
(bootloader) version-hardware: ER3
(bootloader) version-cdma: N/A
(bootloader) variant: grouper
(bootloader) serialno: xxxxxxxxxxxxxxxx
(bootloader) product: grouper
(bootloader) secure: yes
(bootloader) unlocked: no
(bootloader) uart-on: no
(bootloader) partition-size:bootloader:
(bootloader) partition-type:bootloader: emmc
(bootloader) partition-size:recovery: 0x0000000000c00000
(bootloader) partition-type:recovery: emmc
(bootloader) partition-size:boot: 0x0000000000800000
(bootloader) partition-type:boot: emmc
(bootloader) partition-size:system: 0x0000000028a00000
(bootloader) partition-type:system: ext4
(bootloader) partition-size:cache: 0x000000001bb00000
(bootloader) partition-type:cache: ext4
(bootloader) partition-size:userdata: 0x0000000700f00000
(bootloader) partition-type:userdata: ext4
all:
finished. total time: 0.161s
your help please?
regards
Ricey

Ricey_uk said:
Hi all,
I've also got what seems to be a similar problem.
I've tried many (all?) the options to get this thing unlocked.
All I get is:
Code:
fastboot oem unlock
...
(bootloader) erasing userdata...
(bootloader) erasing userdata done
(bootloader) erasing cache...
(bootloader) erasing cache done
(bootloader) unlocking...
FAILED (remote: (Unknown error code))
finished. total time: 4.753s
or if I try a factory flash:
Code:
fastboot flash bootloader bootloader-tilapia-4.13.img
sending 'bootloader' (2096 KB)...
FAILED (remote: Bootloader is locked.)
finished. total time: 0.013s
Also a "restart bootloader" from the recovery screen or
Code:
fastboot reboot-bootloader
takes me to a blank screen.
Holding the power button to reset the Nexus then the power + Vol Down takes me back to recovery with no change.
(I'm looking at this for a friend so not sure exactly what he did, but I doubt it was anything major!)
the machine vars are:
Code:
fastboot getvar all
(bootloader) version-bootloader: 4.13
(bootloader) version-baseband: N/A
(bootloader) version-hardware: ER3
(bootloader) version-cdma: N/A
(bootloader) variant: grouper
(bootloader) serialno: xxxxxxxxxxxxxxxx
(bootloader) product: grouper
(bootloader) secure: yes
(bootloader) unlocked: no
(bootloader) uart-on: no
(bootloader) partition-size:bootloader:
(bootloader) partition-type:bootloader: emmc
(bootloader) partition-size:recovery: 0x0000000000c00000
(bootloader) partition-type:recovery: emmc
(bootloader) partition-size:boot: 0x0000000000800000
(bootloader) partition-type:boot: emmc
(bootloader) partition-size:system: 0x0000000028a00000
(bootloader) partition-type:system: ext4
(bootloader) partition-size:cache: 0x000000001bb00000
(bootloader) partition-type:cache: ext4
(bootloader) partition-size:userdata: 0x0000000700f00000
(bootloader) partition-type:userdata: ext4
all:
finished. total time: 0.161s.
your help please?
regards
Ricey
Click to expand...
Click to collapse
Hi, Ricey_uk...
Mmm... not sure, but I think you're trying to flash the wrong factory image for your device...
Reason being, is because (QUOTE: fastboot flash bootloader bootloader-tilapia-4.13.img) 'tilapia' refers to the 3G/GSM variant of the Nexus 7.
But you appear to have a (QUOTE: (bootloader) product: grouper) 'grouper' device. Which is WiFi only... this seems to be supported by the two lines in your output...
(bootloader) version-baseband: N/A
(bootloader) version-cdma: N/A
... which suggests your N7 has no 'radio' capability.
You need the factory stock image for "nakasi" for Nexus 7 Wi-Fi only (device board "grouper").... NOT "nakasig" for Wi-Fi & Mobile (device board "tilapia").
(See my sig for download links).
-----------
In short, there is an incongruity/contradiction in your reported outputs.... the device is either 'grouper' or it's 'tilapia'
It can't be both.
If it has a SIM card (like a mobile phone), or a space for a SIM card, then it's 'tilapia'... if it doesn't, then it's 'grouper'.
Ensure you are flashing the correct factory stock for your device.
-----------
But having said all of that... (and if there is confusion, it needs to be cleared up)... it doesn't explain why something as straightforward and innocuous as...
Code:
fastboot oem unlock
...isn't working.
Two possibilities occur to me...
1) A bad USB connection. Try a different USB port on your PC... Or, maybe, a different USB cable.
Once the fastboot oem unlock command is issued at the PC end, it will need to be confirmed at the Nexus 7 end (see attached thumbnail). Use either of the two VOL buttons to choose YES and confirm by pressing the POWER button.
2) It's possible there could be a hardware failure... some problem with the EMMC flash memory chip. As alluded to by a previous poster...
bftb0 said:
Most likely. Is it still in Warranty? (The tab should be less than 1 year old)
The whole narrative smells like some kind of failure with the EMMC flash memory chip
There's no point in fooling with adb. It only exists in the booted OS or a custom recovery, and you have neither.
Sorry... but you should probably be contacting Asus at this point.
Click to expand...
Click to collapse
Whilst I don't discount the possibility that it COULD be EMMC chip failure, I'm not inclined to think that this is a likely possbility. More prosaic explanations need to be explored first.
First... check the integrity of of your USB connections - at both ends; change to different USB ports on your PC; if you can, try a different PC; try a different USB cable. And confirm at the Nexus 7 end, once the unlock command has been issued. (again, see attached thumbnail).
Second... if you are going to try to fastboot flash back to Android factory stock... make sure you do so with correct version for your device. If you're device is Wi-Fi only, you need the 'grouper' version... if not, the 'tilapia' version.
Hope this helps.... and good luck.
Rgrds,
Ged.

Hi Ged,
thanks for the info, I was wondering about the .img versions - but I can't seem to find the 'grouper' version of 4.13 anywhere. It's not on the factory downloads page (google)
As for the unlock, it does indeed come up with the screen as you showed, and pressing the power button for 'yes' says that it is unlocking. When it then reboots itself it just stays blank. A hard power cycle back to recovery states that it is still locked.
thought?
cheers

Ricey_uk said:
Hi Ged,
thanks for the info, I was wondering about the .img versions - but I can't seem to find the 'grouper' version of 4.13 anywhere. It's not on the factory downloads page (google)
As for the unlock, it does indeed come up with the screen as you showed, and pressing the power button for 'yes' says that it is unlocking. When it then reboots itself it just stays blank. A hard power cycle back to recovery states that it is still locked.
thought?
cheers
Click to expand...
Click to collapse
Hi, Ricey_uk...
Yeah... that, unfortunately, does not sound good at all. Unlocking the bootloader just sets some 'flag state' on the internal EMMC flash chip. Specifically, somewhere in the mmcblk0boot0 partition, where the bootloader lives.
There's some technical info here... http://forum.xda-developers.com/showthread.php?t=2068207
If fastboot oem unlock is performing as you describe, then it strongly suggests some sort of hardware failure. It just shouldn't behave that way... once you have confirmed the oem unlock request on the Nexus 7, the PC should display (if I remember correctly), the following...
Unlocking....
The device is unlocked now...
The whole procedure should take no more than a few seconds. Blank screens and forced reboots have happened many times on my Nexus 7... but never whilst unlocking the bootloader (and yes, I have locked and relocked several times, when I was experimenting with the 'motochopper' root exploit).
----------------------------------
Incidentally, you won't find 4.13 on the factory downloads page, as that number refers to the bootloader version for JellyBean 4.2 and 4.2.1. (It's not always the case that with each new version of JellyBean the bootloader is updated).
Anyway... looking through my collection of system images on my laptop, I find the following...
JellyBean 4.1.2 -> bootloader-grouper-3.41.img
JellyBean 4.2.0 -> bootloader-grouper-4.13.img
JellyBean 4.2.1 -> bootloader-grouper-4.13.img
JellyBean 4.2.2 -> bootloader-grouper-4.18.img
JellyBean 4.3.0 -> bootloader-grouper-4.23.img
With JellyBean 4.3 being the latest, and it updating the bootloader to 4.23.
If you're still stuck on bootloader version 4.13, then that means it was last updated with the rollout of JellyBean 4.2, sometime around November 2012.
----------------------------------
All of which is technically interesting... but probably doesn't help you.
I think there is a hardware problem on your Nexus 7, that is preventing the bootloader-lock-state flag from being correctly set.
Wish I could be of more assistance.
Rgrds,
Ged.

Thanks Ged,
great info - I was looking for the factory image for JB 4.2.0 to get the bootloader image out of, but that version of JB isn't on the factory page
my theory being if I re-flash the same version it might fix the bootloader?? But it being locked it would need the exact same version?
perhaps if you could mail me the .img file I could try it? I can pm you my address??
cheers!

Ricey_uk said:
Thanks Ged,
great info - I was looking for the factory image for JB 4.2.0 to get the bootloader image out of, but that version of JB isn't on the factory page
my theory being if I re-flash the same version it might fix the bootloader?? But it being locked it would need the exact same version?
perhaps if you could mail me the .img file I could try it? I can pm you my address??
cheers!
Click to expand...
Click to collapse
Give me half an hour or so, and I'll upload it to my dropbox and I'll post a link. Gotta get it of my laptop first.
Although I'm not convinced it will solve your problem... but I suppose you have nothing to loose by trying.
Rgrds,
Ged.
---------- Post added at 12:53 PM ---------- Previous post was at 12:21 PM ----------
OK... here is the bootloader .img file - v4.13... extracted from nakasi-jp40d-factory-6ac58a1a.tar... or in English, Jellybean 4.2.1.
https://dl.dropboxusercontent.com/u/37483979/bootloader-grouper-4.13.img
Code:
File size: 2.05 MiB (2,146,892 bytes)
MD5: a119629c89ad06c7e49bebd260df9cf3
SHA-1: fd60a0d9da5c814e2c1ee049f537700cbbe2c3cc
Flash as follows....
Code:
fastboot flash bootloader bootloader-grouper-4.13.img
---------------
Be careful with this.
Flashing a bootloader is the riskiest single operation you can undertake on the Nexus 7.
All it takes is one false step, and you have a hardbrick.
The device will never boot again.
Make sure you have good USB connections at both ends... and before flashing... type...
Code:
fastboot devices
If you don't see a serial number, you have either a driver problem OR a possible dodgy USB connection.
Do not proceed with this flash until you see a serial number.
Normally, I would suggest test flashing something innocuous first, like a recovery, for example.... but since your bootloader is locked, that's not possible.
I'm not even sure flashing a bootloader is possible with a locked bootloader... but then, I've never directly flashed a bootloader before.
Very best of luck - really hope this fixes your problem.
Rgrds,
Ged.

Many thanks Ged,
tried it to no avail - still getting the 'Bootloader is locked'
It won't even re-flash the existing
I checked all the cables and used a different USB port.
thanks for your help
Ricey

Ricey_uk said:
Many thanks Ged,
tried it to no avail - still getting the 'Bootloader is locked'
It won't even re-flash the existing
I checked all the cables and used a different USB port.
thanks for your help
Ricey
Click to expand...
Click to collapse
Damn... thought that might happen... but wasn't 100% sure.
You can't use fastboot with a locked bootloader, even to flash a bootloader... and you can't unlock it because - well, who the hell knows why (but I suspect a problem with the internal EMMC).
What is the precise current status of your Nexus 7?
Android version?
Rooted?
Stock or Custom ROM/kernel?
Custom recovery (CWM/TWRP) installed?
Did you receive any OTA notifications regarding the recent release of Android 4.3? and if so did you allow the OTA update to proceed? What happened?
Rgrds,
Ged.

I know! I'm stuck in a loop!
I don't know the exact Android version, but it's fairly new and the owner hasn't updated it as far as I know.
Apart from that, completely stock and unrooted!
The last thing to happen was that it was left for a while to go flat (battery) then when re-started it got stuck at the Google logo and no further.
All I can get apart from the Google logo is the recovery with the andoid on his back with his tummy open
cheers

Ricey_uk said:
I know! I'm stuck in a loop!
I don't know the exact Android version, but it's fairly new and the owner hasn't updated it as far as I know.
Apart from that, completely stock and unrooted!
The last thing to happen was that it was left for a while to go flat (battery) then when re-started it got stuck at the Google logo and no further.
All I can get apart from the Google logo is the recovery with the andoid on his back with his tummy open
cheers
Click to expand...
Click to collapse
You can get the Android version info by going to SETTINGS>>ABOUT TABLET.
Without further details, what is odd about your predicament is this...
If your bootloader is v4.13, then that means the device hasn't been updated since November of last year. Since then, there have been, I think, 3 official updates from Google... the most recent being JellyBean 4.3 about a couple of weeks ago
Normally, when an OTA update is pending, you get pestered endlessly with an endless stream of notifications.
Upon the user accepting the lastest update (whatever that might be - but is currently JellyBean 4.3)... the device downloads the OTA, runs a checksum test on the current files in /system... and then'patches' them, meaning it brings them up to date.
The very last thing the OTA does is update the bootloader, by dropping BOOTLOADER.RAW into the USP(staging) partition. Upon automatic reboot, the new bootloader is then copied (from the USP/staging partition) into the bootloader partition proper... thus obviating the risks associated with flashing the bootloader partition directly.
Since November, the bootloader has been updated by this means twice... 4.13->4.18 (in, I think February, when JellyBean 4.22 was rolled out) and just recently 4.18->4.23 when JellyBean 4.3 was rolled out.
It's odd you haven't received any notifications of any OTA updates.
----------------------------------
Anyway.... A possible workaround...
A slightly rhetorical question... why do you want to unlock the bootloader anyway?
I assume it's because you want to root... or maybe flash a custom ROM...
That 'might' still be possible...if you're running a version of Android THAT ISN'T JellyBean 4.3, you can root via 'exploit'.
Details here - http://forum.xda-developers.com/showthread.php?t=2233852
This requires no fastboot commands and thus, no need for an unlocked bootloader.
It's really simple to implement. Indeed, I ran my Nexus 7 for several month BOOTLOADER locked, but rooted.
(But with the advent of JellyBean 4.3, root exploits no longer work.... so I've had to root the old fashioned way).
But it might be useful to you...
Anyway... once you are rooted, you can then flash a Custom Recovery... like CWM or TWRP.
Normally this would be done via fastboot. But there are two great apps available that will 'write' a recovery partition... directly from the Nexus 7.
These are Flash Image GUI and Flashify.
Both will request root access.
It doesn't matter which one you use, as they essentially do the same job... but IMHO, Flashify is the better of the two.
Once you have a Custom Recovery installed, the metaphorical gateway is open to whatever Custom ROMs or Custom Kernels you like.
----------------------------------
It's possible none of the above will work... maybe for the same reason why you can't unlock the bootloader. A suspected fault with the internal EMMC chip.
But it just might... and it's gotta be worth a shot.
To summarize
Root via 'exploit'
Use Flashify or Flash Image GUI to install a Custom Recovery
Good luck.
Rgrds,
Ged.

Fastboot boot twrp.img working?

I was under the impression that fastboot boot twrp.img no longer worked in recent android versions. I recall reading this for a couple of devices. However, out of curiosity, i tried it and it worked today. I am running 7.0 nougat and fastboot booted twrp to back up all partitions using the latest twrp.
If I am wrong mods please delete.

Milly7 said:
I was under the impression that fastboot boot twrp.img no longer worked in recent android versions. I recall reading this for a couple of devices. However, out of curiosity, i tried it and it worked today. I am running 7.0 nougat and fastboot booted twrp to back up all partitions using the latest twrp.
If I am wrong mods please delete.
Click to expand...
Click to collapse
I can confirm that it does indeed work.
Try "adb reboot bootloader" to get into the bootloader. Then make sure that you renamed the image to twrp, then you can do fastboot boot twrp.img and it will work. Just be sure to be using TWRP 3.0.2-1, that one works with Nougat and encryption

I have few questions:
When booted to TWRP using fastboot boot (without flashing), in which partition TWRP is temporarily stored? Is is boot partition? After booting into TWRP (without flashing), if I take backup of boot partition, will it be stock version?

panijsr said:
I have few questions:
When booted to TWRP using fastboot boot (without flashing), in which partition TWRP is temporarily stored? Is is boot partition? After booting into TWRP (without flashing), if I take backup of boot partition, will it be stock version?
Click to expand...
Click to collapse
I don't know the answer to your first question. It just replaces the stock recovery until a reboot.
Assuming that you are using a stock rom, the backup will be the stock boot of the monthly security update that is currently installed.
Sent from my Nexus 5X using Tapatalk

SlimSnoopOS said:
I don't know the answer to your first question. It just replaces the stock recovery until a reboot.
Assuming that you are using a stock rom, the backup will be the stock boot of the monthly security update that is currently installed.
Click to expand...
Click to collapse
It does not modify the recovery partition, even temporarily. That is why, we are able to backup stock recovery, before actually flashing TWRP. It must be residing either in boot or cache partition, until next boot.

fastboot boot recovery.img should work as recovery is a boot image (header, sig, kernel, ramdisk)
Now to know where downloaded data are stored on the device, you'd have to look in fastboot device side code (based on https://source.codeaurora.org/quic/la/kernel/lk/tree/app/aboot) but could be that some code is not published.
fastboot boot involves a download command, followed by a boot command, while fastboot flash involves a download followed by a flash command.
Looks like it's stored in RAM, see https://source.codeaurora.org/quic/la/kernel/lk/tree/app/aboot/aboot.c#n221 and control is then given to this physical address where the kernel and ramdisk (initial rootfs which contains init the first userland program being execed) are.
Downloads can't be stored in cache (100MB), it's too small for a max download size (472MB). From a quick read of the protocol description, it's not clear to me how bigger images are downloaded (system is 1.9GB).
See:
Code:
[email protected]:~$ fastboot getvar all
(bootloader) version:0.01
(bootloader) unlocked:yes
(bootloader) hardware-revision:ANGLER-ROW-VN1
(bootloader) version-baseband:angler-03.81
(bootloader) version-bootloader:angler-03.69
(bootloader) display-panel:
(bootloader) charger-screen-enabled:0
(bootloader) max-download-size: 0x1d800000
(bootloader) partition-type:cache:ext4
(bootloader) partition-size:cache: 0x6400000
(bootloader) partition-type:userdata:ext4
(bootloader) partition-size:userdata: 0x66257ee00
(bootloader) partition-type:system:ext4
(bootloader) partition-size:system: 0xc0000000
(bootloader) serialno:ENU7N15DEADBEEFCAFE
(bootloader) kernel:lk
(bootloader) product:angler
Edit: so I was curious and looked at the code, for IMG bigger than max download size, the file is sent in chunks. And it probably still is uploaded into RAM. Which is Ok as we have 3GB RAM. There's no CRC check though neither for transport nor by rereading written data. For system, that's probably taken care of by dm-verity which kicks in at boot and autocorrects simple mmc error. But it would have been good to see during flash how many inconsistencies were detected.

Bricked ZTE Axon 7 Europe - Help?

Hey everyone.
Following Situation:
-Device Wont Boot
-Unlocking Bootloader not enabled in Developer Settings
-Device Locked
-Can install either stock or TWRP recovery
-TWRP cannot install Lineage OS nor Stock Rom
-Current OS was Stock Nougat from ZTE
-EDL Bootable
-Bootloader bootable
-Can access ADB and Fastboot
fastboot getvar all:
Code:
(bootloader) version:0.5
(bootloader) cmdlog:eek:K
(bootloader) battery-soc-ok:yes
(bootloader) battery-voltage:4029000
(bootloader) variant:AILSA_II eMMC
(bootloader) secure:yes
(bootloader) version-baseband:
(bootloader) version-bootloader:
(bootloader) display-panel:
(bootloader) off-mode-charge:1
(bootloader) charger-screen-enabled:1
(bootloader) max-download-size: 0x20000000
(bootloader) partition-type:cache:ext4
(bootloader) partition-size:cache: 0x32000000
(bootloader) partition-type:userdata:ext4
(bootloader) partition-size:userdata: 0xd1a533000
(bootloader) partition-type:system:ext4
(bootloader) partition-size:system: 0x180000000
(bootloader) serialno:3ac4000
(bootloader) kernel:lk
(bootloader) product:AILSA_II
all:
finished. total time: 0.230s
Basically I can boot everything except the OS itself, it won't let me install any ROMs, fastboot oem unlocking does NOT work.
Does anyone know exactly how to resurrect my phone?
I can of course provide more information as needed.
(Please move if this is not the correct forum, I didn't want to post in Custom Roms and Development because it looks that is only for posting Roms, not issues with the device)
Thanks in advance!

What have you tried?
What did you do that caused this?
Sent from my ZTE A2017U using Tapatalk

Did you try edl roms?

WesTD said:
Did you try edl roms?
Click to expand...
Click to collapse
That's sort of the last thing you should try lol
---------- Post added at 10:30 PM ---------- Previous post was at 10:23 PM ----------
FroschDev said:
Hey everyone.
Following Situation:
-Device Wont Boot
-Unlocking Bootloader not enabled in Developer Settings
-Device Locked
-Can install either stock or TWRP recovery
-TWRP cannot install Lineage OS nor Stock Rom
-Current OS was Stock Nougat from ZTE
-EDL Bootable
-Bootloader bootable
-Can access ADB and Fastboot
fastboot getvar all:
Basically I can boot everything except the OS itself, it won't let me install any ROMs, fastboot oem unlocking does NOT work.
Does anyone know exactly how to resurrect my phone?
I can of course provide more information as needed.
(Please move if this is not the correct forum, I didn't want to post in Custom Roms and Development because it looks that is only for posting Roms, not issues with the device)
Thanks in advance!
Click to expand...
Click to collapse
All right...
-What TWRP version do you have? If you have anything other than 3.1.1-0 (or 3.2.0-0) simply go to the TWRP page, download TWRP 3.1.1-0 (for Axon 7 or ailsa_ii, be sure) and put it in the internal storage. Then go to Install, Install image, select the TWRP-3.1.1-0.img, flash to Recovery. After it installs don't reboot, go to the Reboot button on the lower right hand corner and hit Recovery.
You should boot into TWRP 3.1.1-0 after that.
To install LOS, first wipe data, system, dalvik and cache (not internal unless your files are on an SD card). then flash the Universal Bootloader. After that, install the modem for your own phone model (see at the back of the phone), then again Install image, and install the same TWRP 3.1.1-0.img that you installer before, to Recovery. Then flash Magisk 14.5 or .3 or .0, or SuperSU 2.79, and then reboot to system
EDIT: I just noticed WesTD is kinda right. If your phone has a locked bootloader you'll have to get into EDL and flash a full stock ROM.
If the BL is unlocked then just flash TWRP

All right...
-What TWRP version do you have? If you have anything other than 3.1.1-0 (or 3.2.0-0) simply go to the TWRP page, download TWRP 3.1.1-0 (for Axon 7 or ailsa_ii, be sure) and put it in the internal storage. Then go to Install, Install image, select the TWRP-3.1.1-0.img, flash to Recovery. After it installs don't reboot, go to the Reboot button on the lower right hand corner and hit Recovery.
You should boot into TWRP 3.1.1-0 after that.
To install LOS, first wipe data, system, dalvik and cache (not internal unless your files are on an SD card). then flash the Universal Bootloader. After that, install the modem for your own phone model (see at the back of the phone), then again Install image, and install the same TWRP 3.1.1-0.img that you installer before, to Recovery. Then flash Magisk 14.5 or .3 or .0, or SuperSU 2.79, and then reboot to system
Click to expand...
Click to collapse
I did try that, but with no success.
EDIT: I just noticed WesTD is kinda right. If your phone has a locked bootloader you'll have to get into EDL and flash a full stock ROM.
If the BL is unlocked then just flash TWRP
Click to expand...
Click to collapse
Bootloader is locked, I honestly have no idea why the phone stopped working anyways. I have not tried flashing anything before that happened, that's why I never unlocked the bootloader.
I would love to try EDL Rom flashing, but it seems I need a Windows PC for that and I only got access to Linux PCs.
My dad insisted on returning the phone for repair anyways and just sent it in without my consent, so I guess I have to wait for up to two months now for it to reach my
service provider, then to get sent to ZTE where they will either flash a new firmware or replace the motherboard and eventually coming back home..
Looks like I gotta use a broken Avus A24 with defective battery now for a while..
But thanks for your help anyways guys!

FroschDev said:
I did try that, but with no success.
I would love to try EDL Rom flashing, but it seems I need a Windows PC for that and I only got access to Linux PCs.
But thanks for your help anyways guys!
Click to expand...
Click to collapse
Can't you find a Windows PC? You can fix your phone if you can

WesTD said:
Can't you find a Windows PC? You can fix your phone if you can
Click to expand...
Click to collapse
he just said his dad sent it to ZTE for repair

[Solved] HELP! Phone won't boot from twrp!

I've unlocked the bootloader, flashed twrp from pc and I was going to flash the supersu zip. Unfortunately, when I went in recovery (twrp) and flashed the supersu zip(installation process didn't show any problem) I clicked reboot and the phone didn't boot! It just turns off(no led or similar). I have fastboot and twrp access, I tried flashing omnirom using the adb sideload command, everything went fine but still when pressing reboot nothing happens! I even tried to boot manually (after flashing the ROM) with the physical button but still nothing(this time the led blinked twice).
I used the latest version of twrp for Athene, version 2.82 of supersu if this could help.
Edit: was it necessary to flash a different kernel, as it was a nougat rom? The rooting guide I followed didn't mention that.
Edit: Everything worked fine before Supersu, the problem must be related to Supersu but how can I solve?

Generally, on stock Nougat ROMs (not custom ROMs in general), you will need a custom kernel if you want to root. Else, the strict anti rooting protections in the stock Motorola kernel on Nougat devices will trip and stop you from booting your device.
You could try clearing the misc partition as described here (I've not tried it, so be very careful) https://forum.xda-developers.com/moto-g4/help/troubleshooting-twrp-boot-loop-ota-t3714325 to try to reset the boot issue.
If that doesn't work, we may have to repair with a stock ROM flash via fastboot. Can you remember what stock ROM you last had?
I appreciate there are a lot of rooting guides (albeit most are out of date), for future reference, here's a guide that still works: https://forum.xda-developers.com/mo...de-root-moto-g4-plus-supersu-android-t3587918

echo92 said:
Generally, on stock Nougat ROMs (not custom ROMs in general), you will need a custom kernel if you want to root. Else, the strict anti rooting protections in the stock Motorola kernel on Nougat devices will trip and stop you from booting your device.
You could try clearing the misc partition as described here (I've not tried it, so be very careful) https://forum.xda-developers.com/moto-g4/help/troubleshooting-twrp-boot-loop-ota-t3714325 to try to reset the boot issue.
If that doesn't work, we may have to repair with a stock ROM flash via fastboot. Can you remember what stock ROM you last had?
I appreciate there are a lot of rooting guides (albeit most are out of date), for future reference, here's a guide that still works: https://forum.xda-developers.com/mo...de-root-moto-g4-plus-supersu-android-t3587918
Click to expand...
Click to collapse
The stock rom was the stock one with android Nougat 7.0, I don't remember any other information Moreover there is a omni rom now, as i wrote before.
Edit:
The device is Motorola Moto G4 XT1622

Stefano Barbotto said:
The stock rom was the stock one with android Nougat 7.0, I don't remember any other information Moreover there is a omni rom now, as i wrote before
Click to expand...
Click to collapse
When you flashed omnirom via ADB side load, did you erase /system, /data, cache and dalvik before flashing omnirom?
Latest stock ROM for EU is here by the way https://forum.xda-developers.com/moto-g4-plus/how-to/stock-rom-npjs25-93-14-4-march-1-t3608138

echo92 said:
When you flashed omnirom via ADB side load, did you erase /system, /data, cache and dalvik before flashing omnirom?
Latest stock ROM for EU is here by the way https://forum.xda-developers.com/moto-g4-plus/how-to/stock-rom-npjs25-93-14-4-march-1-t3608138
Click to expand...
Click to collapse
No I didn't, I know I should have done this, though
Edit: So, should I try with the partitions or directly flash stock rom? What do you suggest? The xda page related to partitions was related to another issue....

Stefano Barbotto said:
No I didn't, I know I should have done this, though
Edit: So, should I try with the partitions or directly flash stock rom? What do you suggest? The xda page related to partitions was related to another issue....
Click to expand...
Click to collapse
Okay, the partitions page was an idea to get you out of the TWRP boot issues you had.
For now though, the priority is to get your device running, you could try reflashing omnirom after erasing /system, /data, /dalvik and /cache ( so removing your stock system and data, I hope you backed up). Try booting with the custom ROM. Since you've got TWRP access, this would be easiest, you can always copy files to your device whilst in TWRP and connected via USB.
If that doesn't get your device running or you want to revert back to stock, them flash the stock ROM in fastboot.

echo92 said:
Okay, the partitions page was an idea to get you out of the TWRP boot issues you had.
For now though, the priority is to get your device running, you could try reflashing omnirom after erasing /system, /data, /dalvik and /cache ( so removing your stock system and data, I hope you backed up). Try booting with the custom ROM. Since you've got TWRP access, this would be easiest, you can always copy files to your device whilst in TWRP and connected via USB.
If that doesn't get your device running or you want to revert back to stock, them flash the stock ROM in fastboot.
Click to expand...
Click to collapse
I didn't even back up the rom from twrp, I totally forgot. I only have information backed up from the motorola account(which is not the back up of the rom, of course). Anyway, I'll try flashing and tell you, thanks for the help

echo92 said:
Okay, the partitions page was an idea to get you out of the TWRP boot issues you had.
For now though, the priority is to get your device running, you could try reflashing omnirom after erasing /system, /data, /dalvik and /cache ( so removing your stock system and data, I hope you backed up). Try booting with the custom ROM. Since you've got TWRP access, this would be easiest, you can always copy files to your device whilst in TWRP and connected via USB.
If that doesn't get your device running or you want to revert back to stock, them flash the stock ROM in fastboot.
Click to expand...
Click to collapse
Tried to flash the stock rom you seggested in fastboot mode (followed the instructions in the link you provided), everything worked fine but the phone dosn't boot and remains connected and blinks....I don't know what else to do.

Stefano Barbotto said:
Tried to flash the stock rom you seggested in fastboot mode (followed the instructions in the link you provided), everything worked fine but the phone dosn't boot and remains connected and blinks....I don't know what else to do.
Click to expand...
Click to collapse
Hmm, what outputs did you receive from the flashing commands, were they all reporting [OKAY]? How long did you leave your device to boot?
Are you still able to boot to bootloader? If so, can you re-connect your device to your computer, and in the ADB terminal, type 'fastboot getvar all' (without the quotes) and post the output here please? You may wish to omit your IMEI that's included in these device variables.
Can you hold down the power button for 2-3 minutes, try a hard shutdown, then try to reboot?

echo92 said:
Hmm, what outputs did you receive from the flashing commands, were they all reporting [OKAY]? How long did you leave your device to boot?
Are you still able to boot to bootloader? If so, can you re-connect your device to your computer, and in the ADB terminal, type 'fastboot getvar all' (without the quotes) and post the output here please? You may wish to omit your IMEI that's included in these device variables.
Can you hold down the power button for 2-3 minutes, try a hard shutdown, then try to reboot?
Click to expand...
Click to collapse
Here is the output from the command "fastboot getvar all":
C:\Program Files (x86)\Minimal ADB and Fastboot>fastboot getvar all
(bootloader) slot-count: not found
(bootloader) slot-suffixes: not found
(bootloader) slot-suffixes: not found
(bootloader) version: 0.5
(bootloader) version-bootloader: moto-msm8952-B1.06
(bootloader) product: athene_13mp
(bootloader) board: athene_13mp
(bootloader) secure: yes
(bootloader) hwrev: P2A
(bootloader) radio: 3
(bootloader) storage-type: emmc
(bootloader) emmc: 16GB SAMSUNG QE13MB RV=08 PV=07 FV=0000000000000007
(bootloader) ram: 2GB SAMSUNG LP3 DIE=8Gb M5=01 M6=05 M7=00 M8=1F
(bootloader) cpu: MSM8952
(bootloader) serialno: ZY2239WC6B
(bootloader) cid: 0x0032
(bootloader) channelid: 0x40
(bootloader) uid: A40BEC0000000000000000000000
(bootloader) securestate: flashing_unlocked
(bootloader) iswarrantyvoid: yes
(bootloader) max-download-size: 536870912
(bootloader) reason: Volume down key pressed
(bootloader) imei: 354123071313730
(bootloader) meid:
(bootloader) date: 06-02-2016
(bootloader) sku: XT1622
(bootloader) battid: SNN5970A
(bootloader) iccid:
(bootloader) cust_md5:
(bootloader) max-sparse-size: 268435456
(bootloader) current-time: "Thu Apr 21 5:47:54 UTC 2016"
(bootloader) ro.build.fingerprint[0]: motorola/athene/athene:7.0/NPJS25.
(bootloader) ro.build.fingerprint[1]: 93-14-10/10:user/release-keys
(bootloader) ro.build.version.full[0]: Blur_Version.25.221.10.athene.ret
(bootloader) ro.build.version.full[1]: ail.en.US
(bootloader) ro.build.version.qcom: LA.BR.1.3.6-01710-8976.0
(bootloader) version-baseband[0]: M8952_70030.25.03.62.01R ATHENE_EMEA_D
(bootloader) version-baseband[1]: SDS_CUST
(bootloader) kernel.version[0]: Linux version 3.10.84-g9b51918 (hudsoncm
(bootloader) kernel.version[1]: @ilclbld26) (gcc version 4.8 (GCC) ) #1
(bootloader) kernel.version[2]: SMP PREEMPT Mon Aug 28 09:30:48 CDT 2017
(bootloader) sbl1.git: git=MBM-NG-VB1.06-0-g57d1343
(bootloader) rpm.git: git=MBM-NG-VB1.06-0-ga970ead
(bootloader) tz.git: git=69dd24b-dirty
(bootloader) hyp.git: git=69dd24b-dirty
(bootloader) keymaster.git: git=69dd24b-dirty
(bootloader) cmnlib.git: git=69dd24b-dirty
(bootloader) aboot.git: git=MBM-NG-VB1.06-0-g0edfb0d
(bootloader) qe: qe 0/0
(bootloader) frp-state: no protection (77)
(bootloader) ro.carrier: reteu
all: listed above
finished. total time: 0.422s

echo92 said:
Hmm, what outputs did you receive from the flashing commands, were they all reporting [OKAY]? How long did you leave your device to boot?
Are you still able to boot to bootloader? If so, can you re-connect your device to your computer, and in the ADB terminal, type 'fastboot getvar all' (without the quotes) and post the output here please? You may wish to omit your IMEI that's included in these device variables.
Can you hold down the power button for 2-3 minutes, try a hard shutdown, then try to reboot?
Click to expand...
Click to collapse
As for the outputs of the flashing commands, I couldn't copy them, as I used the OEM flash provided by the author of the post(the window opened and closed automatically) rather than manually inputing the commands in the prompt. I'll try manually and tell you

echo92 said:
Hmm, what outputs did you receive from the flashing commands, were they all reporting [OKAY]? How long did you leave your device to boot?
Are you still able to boot to bootloader? If so, can you re-connect your device to your computer, and in the ADB terminal, type 'fastboot getvar all' (without the quotes) and post the output here please? You may wish to omit your IMEI that's included in these device variables.
Can you hold down the power button for 2-3 minutes, try a hard shutdown, then try to reboot?
Click to expand...
Click to collapse
As for the outputs from the flashing commands, I wasn't able to copy them, as I used the "OEM flash" file (from the author of this link :https://forum.xda-developers.com/moto-g4-plus/how-to/stock-rom-npjs25-93-14-4-march-1-t3608138) which automatically opened and closed the prompt

Stefano Barbotto said:
As for the outputs from the flashing commands, I wasn't able to copy them, as I used the "OEM flash" file (from the author of this link : https://forum.xda-developers.com/moto-g4-plus/how-to/stock-rom-npjs25-93-14-4-march-1-t3608138) which automatically opened and closed the prompt
Click to expand...
Click to collapse
Okay, that script should work and looking at the getvar log, it looks like the firmware flashed okay (your bootloader, baseband and system all match), so I'm confused as to why your device is failing to boot...
Can you try manually flashing and reporting back if you get all [OKAY] responses? By manually flashing, I mean copying each command into the ADB terminal in sequence, then executing each command, seeing the [OKAY] before proceeding. That way, we can be sure we have stock fully and no trace of root which might be tripping the checks. I'd like to see the output if possible

echo92 said:
Okay, that script should work and looking at the getvar log, it looks like the firmware flashed okay (your bootloader, baseband and system all match), so I'm confused as to why your device is failing to boot...
Can you try manually flashing and reporting back if you get all [OKAY] responses? By manually flashing, I mean copying each command into the ADB terminal in sequence, then executing each command, seeing the [OKAY] before proceeding. That way, we can be sure we have stock fully and no trace of root which might be tripping the checks. I'd like to see the output if possible
Click to expand...
Click to collapse
I really, extremely apologize for being so dumb : I forgot to unzip the stock rom file, so the files weren't recognised while I was entering the commands. The phone is now perfectly working, thanks again for the great help!
By the way, If I wanted to to root the device, how should I install another kernel?

Stefano Barbotto said:
I really, extremely apologize for being so dumb : I forgot to unzip the stock rom file, so the files weren't recognised while I was entering the commands. The phone is now perfectly working, thanks again for the great help!
By the way, If I wanted to to root the device, how should I install another kernel?
Click to expand...
Click to collapse
If you flashed TWRP you can install the kernel with twrp.

Stefano Barbotto said:
I really, extremely apologize for being so dumb : I forgot to unzip the stock rom file, so the files weren't recognised while I was entering the commands. The phone is now perfectly working, thanks again for the great help!
By the way, If I wanted to to root the device, how should I install another kernel?
Click to expand...
Click to collapse
Woo, we got your device working
If you're still interested in rooting on stock Nougat and flashing a custom kernel (I use ElementalX here for reference, but other custom kernels suitable for Nougat 7.0 stock Motorola athene ROMs should work, like vegito), assuming your bootloader is unlocked:
1)Download ElementalX and your choice of root manager onto your device. ElementalX v1.04 is designed for stock Motorola 7.0 ROMs : https://forum.xda-developers.com/moto-g4-plus/development/kernel-elementalx-g4-0-01-t3424836
2)Flash or boot TWRP. Up to you which TWRP build you use, I prefer shreps' TWRP 3.1.1 athene (https://forum.xda-developers.com/mo...covery-twrp-3-0-2-r3-moto-g4-g4-plus-t3494337 ) but the official builds should suffice.
Boot your device to the bootloader and connect your device to your computer. In the ADB terminal, flash TWRP to your recovery partition if you see yourself using TWRP a lot, remember to boot into recovery after flashing to ensure TWRP is not overwritten by the stock recovery (assuming your device is still in the bootloader mode following the flash, use the volume keys on your device after flashing TWRP to select Recovery on your device, then press Power to boot into recovery). You may boot as normal afterwards.
Alternatively, you can temporarily boot in TWRP, which should keep your recovery partition stock but mean you'll have to require a computer to use TWRP.
To boot into TWRP, boot your device to the bootloader and connect to your computer. Copy the TWRP image to your ADB folder. In the ADB terminal type:
Code:
fastboot boot <name of TWRP image>
The <name of TWRP image> should be the full file name (without the greater than/less than signs), you can start typing the first letters of the image name and press Tab on your keyboard to auto-complete if the file is present in the same folder (which it should be if copied to your ADB folder). Ensure that the file name has the correct file name extensions, you may wish to enable file extensions in Windows File Explorer to check, tab auto-complete will do this for you.
3)In TWRP, back up your device using the Backup option (usually everything except cache which should be the default selection).
3a)Also, make a separate backup of the boot partition - this 16 MB partition contains your clean, stock kernel (if you fully flashed the stock firmware).
4)Tap Install in TWRP, and navigate to your Download folder or wherever your ElementalX zip is stored. Flash ElementalX as directed by the installer. After flashing, wipe cache/Dalvik (should appear as an option on screen).
5)After flashing ElementalX, you can choose to flash your choice of root manager or reboot first to check your device is still running. If it's still working, then you can reboot to TWRP (either by rebooting to recovery or using a PC to temporarily boot). Flash your root manager in TWRP (same way as you flashed ElementalX) and then reboot, you should have a stock ROM rooted and booting
A few things to note:
As you'd have TWRP and root, OTA stock updates won't work, and taking an OTA update would soft bootloop your device in TWRP. There are ways to get around this, but you may wish to disable the Motorola updater to stop you being nagged/accidentally downloading the OTA update https://forum.xda-developers.com/moto-g4-plus/help/how-disable-notification-update-t3459587
If you want OTA updates, you'd have to revert to stock fully, but we'll get to that when the time comes.
Rooting with SuperSU may mean that SafetyNet fails - this is Google's anti-tamper/anti-rooting detection, and thus some apps may fail to work. You may use SuperSU hide https://forum.xda-developers.com/apps/supersu/suhide-lite-t3653855 or magisk's built-in magiskhide to hide the root manager from detection.
If you have any issues whilst rooting, you may choose to use the backups you made in 3)
If you want to switch custom kernels or change root manager, then I recommend:
a)Uninstall root via your root manager's uninstall procedure. For example, SuperSU has an uninstall function in the SuperSU app, magisk requires a TWRP flashable uninstaller.
b)Reboot into TWRP (if not already in TWRP)
c)Restore the stock kernel backup you made above in 3a). This should remove traces of root from your kernel that may conflict with your new kernel and cause chaos.
d)Flash your new custom kernel of choice followed by your root manager.
e)Wipe cache/Dalvik and reboot.
Good luck

echo92 said:
Woo, we got your device working
If you're still interested in rooting on stock Nougat and flashing a custom kernel (I use ElementalX here for reference, but other custom kernels suitable for Nougat 7.0 stock Motorola athene ROMs should work, like vegito), assuming your bootloader is unlocked:
1)Download ElementalX and your choice of root manager onto your device. ElementalX v1.04 is designed for stock Motorola 7.0 ROMs : https://forum.xda-developers.com/moto-g4-plus/development/kernel-elementalx-g4-0-01-t3424836
2)Flash or boot TWRP. Up to you which TWRP build you use, I prefer shreps' TWRP 3.1.1 athene (https://forum.xda-developers.com/mo...covery-twrp-3-0-2-r3-moto-g4-g4-plus-t3494337 ) but the official builds should suffice. Flash TWRP to your recovery partition if you see yourself using TWRP a lot, remember to boot into recovery after flashing to ensure TWRP is not overwritten by the stock recovery (use the volume keys your device after flashing TWRP to select Recovery on your device, then press Power to boot into recovery). You may boot as normal afterwards.
Alternatively, you can temporarily boot in TWRP, which should keep your recovery partition stock but mean you'll have to require a computer to use TWRP.
To boot into TWRP, boot your device to the bootloader and connect to your computer. Copy the TWRP image to your ADB folder. In the ADB terminal type:
Code:
fastboot boot <name of TWRP image>
The <name of TWRP image> should be the full file name (without the greater than/less than signs), you can start typing the first letters of the image name and press Tab on your keyboard to auto-complete if the file is present in the same folder (which it should be if copied to your ADB folder). Ensure that the file name has the correct file name extensions, you may wish to enable file extensions in Windows File Explorer to check, tab auto-complete will do this for you.
3)In TWRP, back up your device using the Backup option (usually everything except cache which should be the default selection).
3a)Also, make a separate backup of the boot partition - this 16 MB partition contains your clean, stock kernel (if you fully flashed the stock firmware).
4)Tap Install in TWRP, and navigate to your Download folder or wherever your ElementalX zip is stored. Flash ElementalX as directed by the installer. After flashing, wipe cache/Dalvik (should appear as an option on screen).
5)After flashing ElementalX, you can choose to flash your choice of root manager or reboot first to check your device is still running. If it's still working, then you can reboot to TWRP (either by rebooting to recovery or using a PC to temporarily boot). Flash your root manager in TWRP (same way as you flashed ElementalX) and then reboot, you should have a stock ROM rooted and booting
A few things to note:
As you'd have TWRP and root, OTA stock updates won't work, and taking an OTA update would soft bootloop your device in TWRP. There are ways to get around this, but you may wish to disable the Motorola updater to stop you being nagged/accidentally downloading the OTA update https://forum.xda-developers.com/moto-g4-plus/help/how-disable-notification-update-t3459587
If you want OTA updates, you'd have to revert to stock fully, but we'll get to that when the time comes.
Rooting with SuperSU may mean that SafetyNet fails - this is Google's anti-tamper/anti-rooting detection, and thus some apps may fail to work. You may use SuperSU hide https://forum.xda-developers.com/apps/supersu/suhide-lite-t3653855 or magisk's built-in magiskhide to hide the root manager from detection.
If you have any issues whilst rooting, you may choose to use the backups you made in 3)
If you want to switch custom kernels or change root manager, then I recommend:
a)Uninstall root via your root manager's uninstall procedure. For example, SuperSU has an uninstall function in the SuperSU app, magisk requires a TWRP flashable uninstaller.
b)Reboot into TWRP (if not already in TWRP)
c)Restore the stock kernel backup you made above in 3a). This should remove traces of root from your kernel that may conflict with your new kernel and cause chaos.
d)Flash your new custom kernel of choice followed by your root manager.
e)Wipe cache/Dalvik and reboot.
Good luck
Click to expand...
Click to collapse
Just a question: I already have twrp on my device(I normally access by powering off phone, then power+volume down keys, then I select recovery from the menu and I am in twrp), how do I know if it is already flashed to my recovery partition? Should I flash twrp from pc in fastboot mode again and then boot into recovery after flashing, as you wrote? Thanks in advance for the reply

Stefano Barbotto said:
Just a question: I already have twrp on my device(I normally access by powering off phone, then power+volume down keys, then I select recovery from the menu and I am in twrp), how do I know if it is already flashed to my recovery partition? Should I flash twrp from pc in fastboot mode again and then boot into recovery after flashing, as you wrote? Thanks in advance for the reply
Click to expand...
Click to collapse
If you've already got TWRP on your device and can not into it, then it's already flashed to your recovery partition. No need to flash it again.
Just boot into TWRP and follow from step 3 (backing up your device)

echo92 said:
If you've already got TWRP on your device and can not into it, then it's already flashed to your recovery partition. No need to flash it again.
Just boot into TWRP and follow from step 3 (backing up your device)
Click to expand...
Click to collapse
I can into it via the fastboot menu but not directly with the combination of power + volume down buttons(this sends me in fastboot mode). If I haven't misunderstood, this means it's already flashed to my recovery partition, is it right?

Stefano Barbotto said:
I can into it via the fastboot menu but not directly with the combination of power + volume down buttons(this sends me in fastboot mode). If I haven't misunderstood, this means it's already flashed to my recovery partition, is it right?
Click to expand...
Click to collapse
Volume down and power button combinations should always send you to the bootloader/fastboot mode (won't let you boot directly to recovery), then you can select recovery from the fastboot menu. If it's as you described, then yes, you already have TWRP flashed to your recovery partition and you're doing things correctly.
What I wrote in step 2) assumed your device was already booted into the bootloader mode to flash/boot TWRP. Hence, you can use the volume and power keys as you described to boot into TWRP recovery. I'll add that to make the procedure clearer
For clarity's sake:
Powered off device > Pressing the power and volume down keys > Bootloader/fastboot mode.
In bootloader/fastboot mode, select recovery from the fastboot menu with the volume keys. Press Power key to select
If you see:
TWRP logo - you have TWRP flashed to your recovery partition
OR a green Android on its back with No Command - that's stock recovery.

Nexus 10 GT-P8110 Will not accept any flash, rom, kernel, radio, stock!

I got a second hand nexus 10, when it boots up it is on cyanogen mod:
kernel 3.4.67-cyanogenmpd-gedbec95 [email protected] #1 mon nov 18 18:16:58 pst 2015
build date mon nov 16 18:04:11 PST 2015
build number: cm_manta-userdebug 5.1.1 LMY48Y 89d47a5074 test-keys
SELINUX Status Enforcing
When I boot the device it runs the rom and has TWRP 3.0.2-0 installed. When I boot into TWRP and select factory reset and even go as far as wiping system the device reboots back to the ROM. When I uninstall apps or try to flash factory roms the device accepts the files such as recovery.img etc but then reboots to the ROM with the apps I removed still there. It is like whatever I try to do to it it always reverts back to the current ROM and always reboots in the same state, even if I have enabled USB debugging, this disappears on reboot.
I have tried to flash recovery, radio, kernels, system etc etc and the device says it takes them but on reboot it always reverts to the ROM. Nothing I do can change anything on this device.
I have tried a different OS, different USB cable, flashing via sideload, bootloader, fastboot. It is always the same.
Any ideas?????

Further to my last, something strange about this device is that I cannot re lock the bootloader. I am begining to think the bootloader is somehow corrupt, but attempts to flash the stock bootloader do not work. Anything I flash says it has been flashed but upon reboot its back to square 1. I have even gone as far as to unmount the system partition in TWRP and delete several critical system files, and again, on reboot they appear again. Any ideas anyone?

nokiaman2002 said:
Further to my last, something strange about this device is that I cannot re lock the bootloader. I am begining to think the bootloader is somehow corrupt, but attempts to flash the stock bootloader do not work. Anything I flash says it has been flashed but upon reboot its back to square 1. I have even gone as far as to unmount the system partition in TWRP and delete several critical system files, and again, on reboot they appear again. Any ideas anyone?
Click to expand...
Click to collapse
To restore to stock i used "Nexus Root Toolkit" i pushed on "Flash Stock + lock" and then u select the image and follow the indications on screen. It is like ADB commands just it has a GUI so maybe it is easyer.

steveyyyy said:
To restore to stock i used "Nexus Root Toolkit" i pushed on "Flash Stock + lock" and then u select the image and follow the indications on screen. It is like ADB commands just it has a GUI so maybe it is easyer.
Click to expand...
Click to collapse
I have tried that, still the same. I do not think there is anything I have not tried! All I want to do is put Kali Nethunter on it. I have even opened up the device to check for water damage and its dry inside. I have even tried a different usb cable, port, operating system.

nokiaman2002 said:
I have tried that, still the same. I do not think there is anything I have not tried! All I want to do is put Kali Nethunter on it. I have even opened up the device to check for water damage and its dry inside. I have even tried a different usb cable, port, operating system.
Click to expand...
Click to collapse
But the device still turns on, what does the bootloader tell? U could use the download mode (powerbutton + volum down). I never used download mode so i can't tell how it works. But on other samsung devices you could send the firmware to the device with "Odin".

steveyyyy said:
But the device still turns on, what does the bootloader tell? U could use the download mode (powerbutton + volum down). I never used download mode so i can't tell how it works. But on other samsung devices you could send the firmware to the device with "Odin".
Click to expand...
Click to collapse
There is no odin download mode on this device just the bootloader which accepts fastboot commands.

nokiaman2002 said:
There is no odin download mode on this device just the bootloader which accepts fastboot commands.
Click to expand...
Click to collapse
The bootloader, if it shows up, what exactly does it tell, does it have some strange behavior like if u push vol up or down it doesn't change text. Maybe retry to flash stock with another PC.

Bootloader looks normal with all the usual options of reboot bootloader, start recovery, and start system. Bootloader state is always UNLOCKED even tho I can try to set it to LOCKED using fastboot. That is what leads me to think the bootloader is corrupt. I have tried another pc, and another usb cable. It is like any command send to it is being ignored but the bootloader is saying OK THATS FINE. I have tried flashing another bootloader and flashing another recovery and flashing boot.img from stock. On reboot it always reverts to TWRP 3.0.2-0 no matter what. I can fastboot reboot a custom recovery or stock and it works, but any commands sent there are dealt with the same way. I may as well buy another from ebay as this thing I have wasted a lot of time on.

fastboot getvar all: Shows bootloader SECURE YES, so the bootloader is secure and will not allow much flashing
(bootloader) product: manta
(bootloader) variant: wifi-only
(bootloader) serialno: R32D1014MET
(bootloader) version-hardware: 8
(bootloader) version-bootloader: MANTAMF01
(bootloader) secure: yes
(bootloader) unlocked: yes
(bootloader) off-mode-charge: enabled(1)
(bootloader) signing: yes
(bootloader) boot partition- type: raw, size: 0x0000000001000000
(bootloader) recovery partition- type: raw, size: 0x0000000001ff0000
(bootloader) metadata partition- type: raw, size: 0x0000000000010000
(bootloader) misc partition- type: raw, size: 0x0000000000400000
(bootloader) cache partition- type: ext4, size: 0x0000000021000000
(bootloader) system partition- type: ext4, size: 0x0000000032000000
(bootloader) userdata partition- type: ext4, size: 0x0000000352c00000