Bad thing with wrong offset, but is only a softbrick...
If you write a older stock fw with tftp, the bootloader gets not downgraded if you used a fw with boot in the name.
Only from the stock web interface the bootloader of the stock fw gets written to flash.
Please provide a serial log of tftp recovery if you solder a serial header.
Would be interesting why it didn´t work...