R6700 v2 brick using nmrpflash

I ran out of idea. the best is I can get Luci in Recovery. Any thing I can try please?

initially I install from Netgear factory UI for 22.0.3.3 (Factory img). OpenWRT and Luci came up fine. But internet not working and I just read Signal power is weak, so I use nmrpflash to put Netgear back ./nmrpflash -i en0 -v -f R6700v2_V1.2.0.92_1.0.1.img The command finished and I rebooted twice. it is now in boot loop. LED will all turned off then: power LED on, Lan LED on, WiFi on/off LED on, then it will loop. If I connect RJ45 to Lan1, I get assigned 169.254.86.199, therefore cannot get to Luci. Out of desperation, I ssh to 192.168.1.1 got conn refused.

If I do exactly same with openwrt-22.03.3-ramips-mt7621-netgear_r6700-v2-squashfs-factory.img in hope of getting at least OpenWRT, it would stuck LED of Power, Lan are on. (Wifi on/off didn't get on) and stuck.

If I do it with openwrt-22.03.3-ramips-mt7621-netgear_r6700-v2-squashfs-sysupgrade.bin -- it will stuck, not loop

If I do it with openwrt-22.03.3-ramips-mt7621-netgear_r6700-v2-initramfs-kernel.bin -- I will get Luci in Recovery mode at 192.168.1.1. (Mac assigned 192.168.1.241). I can ssh as root.

From Recovery Luci, I uploaded the above sysupgrade again -- it will boot loop. reboot twice, no help.
From Recovery Luci, I uploaded Netgear factory img, will stuck, no IP

if I do 30/30/30 reset, Power will stay flashing