Xiaomi R3G error when flash with breed

My router was bricked when flash with breed! And I was try with pandorabox, it same errors, please check and help me

▒
Boot and Recovery Environment for Embedded Devices
Copyright (C) 2018 HackPascal <hackpascal@gmail.com>
Build date 2018-10-14 [git-9463f9c]
Version 1.1 (r1237)

DRAM: 256MB
Platform: MediaTek MT7621A ver 1, eco 3
Board: Xiaomi R3G
Clocks: CPU: 880MHz, DDR: 1200MHz, Bus: 220MHz, Ref: 40MHz
Environment variables @ 00060000 on flash bank 0, size 00020000
Flash: ESMT NAND 128MiB 3.3V 8-bit (128MB) on mt7621-nfi.0
mt7621-nfi.0: Found Fact BBT at block 1023 (offset 0x07fe0000)
mt7621-nfi.0: Block 699 (offset 0x05760000) is marked as bad block in Fact BBT
mt7621-nfi.0: Block 718 (offset 0x059c0000) is marked as bad block in Fact BBT
mt7621-nfi.0: Block 871 (offset 0x06ce0000) is marked as bad block in Fact BBT
mt7621-nfi.0: Block 880 (offset 0x06e00000) is marked as bad block in Fact BBT
mt7621-nfi.0: Block 885 (offset 0x06ea0000) is marked as bad block in Fact BBT
mt7621-nfi.0: Block 919 (offset 0x072e0000) is marked as bad block in Fact BBT
mt7621-nfi.0: Block 958 (offset 0x077c0000) is marked as bad block in Fact BBT
mt7621-nfi.0: Block 975 (offset 0x079e0000) is marked as bad block in Fact BBT
rt2880-eth: MAC address from EEPROM is invalid, using default settings.
rt2880-eth: Using MAC address 00:0c:43:00:00:01
eth0: MediaTek MT7530 Gigabit switch

Network started on eth0, inet addr 192.168.1.1, netmask 255.255.255.0

Press any key to interrupt autoboot ... 1
Autoboot aborted due to key press.

Starting breed built-in shell

breed> ls
Unrecognised command: ls
Type 'help' to get available commands.

breed> help
Available commands:
about    - About this bootloader
abstatus - Interrupt status of autoboot
arp      - Display ARP table
autoboot - Detect firmware type and boot automatically
boot     - Boot firmware
btntst   - Test GPIO of buttons
dhcp     - Display DHCP leases
env      - Environment variables utility
exit     - Exit from telnet
flash    - Flash utility
gpio     - GPIO utilities
help     - Show available commands
mdio     - MDIO utility
mem      - Memory operation utilities
net      - Network control
netstat  - Display network state
reset    - Restart device
sysinfo  - Display system information
thread   - Display all threads
wget     - Retrieval file through HTTP

breed> netstat
Unrecognised command: n▒etstat
Type 'help' to get available commands.

breed> etstat
Protocol    Local Address           Foreign Address         State
TCP         192.168.1.1:80          0.0.0.0:0               LISTENING
TCP         192.168.1.1:23          0.0.0.0:0               LISTENING

breed> net
Usage:
  net [start|stop]

breed> boot
Usage:
  boot mem <addr>   - Boot from memory address or memory-mapped address
  boot flash [bank <n>] <addr>   - Boot from flash
  boot linux <addr> - Boot linux kernel at <addr>
  boot raw <addr>   - Disable interrupts and jump to <addr>
  boot breed <addr> - Boot given breed file at <addr>

breed> help
Available commands:
about    - About this bootloader
abstatus - Interrupt status of autoboot
arp      - Display ARP table
autoboot - Detect firmware type and boot automatically
boot     - Boot firmware
btntst   - Test GPIO of buttons
dhcp     - Display DHCP leases
env      - Environment variables utility
exit     - Exit from telnet
flash    - Flash utility
gpio     - GPIO utilities
help     - Show available commands
mdio     - MDIO utility
mem      - Memory operation utilities
net      - Network control
netstat  - Display network state
reset    - Restart device
sysinfo  - Display system information
thread   - Display all threads
wget     - Retrieval file through HTTP

breed> flash
Usage:
  flash list                                 - List all flashes
  flash [bank <n>] info                      - Show detail of flash bank <n>
  flash [bank <n>] dump <addr> <size>        - Display contents of flash
  flash [bank <n>] read <addr> <dst> <size>  - Read flash contents to memory
  flash [bank <n>] erase <addr> <size>       - Erase flash sector(s)
  flash [bank <n>] write <addr> <src> <size> - Write data to flash

breed> flash list
Bank    Type        Size    Model
0       NAND        128MB   ESMT NAND 128MiB 3.3V 8-bit

breed> flash info
Flash bank #0 (Master):
  Type: NAND
  Capacity: 128MB
  Model: ESMT NAND 128MiB 3.3V 8-bit
  Parent device: mt7621-nfi
  Sector size: 128KB
  Erase sector size: 128KB
  Operation freq.: 125MHz

breed> mem
Usage:
  mem dump [keep] <start_addr> [size]          - Display memory range
  mem crc32 <addr> <size>                      - Calculate CRC32 of memory range
  mem read [byte|short|long] <addr>            - Read value from specific address
  mem write [byte|short|long] <addr> <value>   - Write value to specific address
  mem write str <addr> <str>                   - Write string to specific address
  mem copy <dst> <src> <size>                  - Copy memory block
  mem fill <dst> <val> <size>                  - Fill memory block
  mem compare <addr1> <addr2> <size>           - Compare memory block

breed> help
Available commands:
about    - About this bootloader
abstatus - Interrupt status of autoboot
arp      - Display ARP table
autoboot - Detect firmware type and boot automatically
boot     - Boot firmware
btntst   - Test GPIO of buttons
dhcp     - Display DHCP leases
env      - Environment variables utility
exit     - Exit from telnet
flash    - Flash utility
gpio     - GPIO utilities
help     - Show available commands
mdio     - MDIO utility
mem      - Memory operation utilities
net      - Network control
netstat  - Display network state
reset    - Restart device
sysinfo  - Display system information
thread   - Display all threads
wget     - Retrieval file through HTTP

breed> dhcp
IP address          MAC address

breed> autoboot
Trying to boot firmware from 0x00200000 in flash bank 0 ...
Reading data into memory ...
U-Boot firmware image header detected.
    Image Name:   MIPS OpenWrt Linux-4.14.79
    Data Size:    1919335 Bytes
    Load Address: 80001000
    Entry Point:  80001000
Uncompressing data (LZMA) ... done.
Flushing cache ... done.

Starting kernel at 0x80001000...

[    0.000000] Linux version 4.14.79 (mogvai@linux) (gcc version 7.3.0 (OpenWrt GCC 7.3.0 r7258-5eb055306f)) #0 SMP Fri Nov 9 22:03:53 2018
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is Xiaomi Mi Router 3G
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 10000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x000000000fffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x000000000fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x000000000fffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x90/0x4a4 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81210000 s26256 r8192 d22896 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 65024
[    0.000000] Kernel command line: console=ttyS0,115200n8 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Writing ErrCtl register=000192c0
[    0.000000] Readback ErrCtl register=000192c0
[    0.000000] Memory: 253300K/262144K available (4531K kernel code, 232K rwdata, 992K rodata, 248K init, 249K bss, 8844K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000010] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.007806] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.073972] pid_max: default: 32768 minimum: 301
[    0.078738] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.085245] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.094024] Hierarchical SRCU implementation.
[    0.099164] smp: Bringing up secondary CPUs ...
[    3.597742] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    3.597751] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    3.597763] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    3.597902] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.163912] Synchronize counters for CPU 1: done.
[    2.887858] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    2.887867] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    2.887876] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    2.887947] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.254957] Synchronize counters for CPU 2: done.
[    6.158124] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    6.158131] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    6.158140] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    6.158219] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.340132] Synchronize counters for CPU 3: done.
[    0.369990] smp: Brought up 1 node, 4 CPUs
[    0.377701] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.387482] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.393784] pinctrl core: initialized pinctrl subsystem
[    0.399512] NET: Registered protocol family 16
[    0.414669] pull PCIe RST: RALINK_RSTCTRL = 0
[    0.719332] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.724380] ***** Xtal 40MHz *****
[    0.727736] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.732833] Port 0 N_FTS = 1b102800
[    0.736302] Port 1 N_FTS = 1b102800
[    0.739745] Port 2 N_FTS = 1b102800
[    1.894763] PCIE2 no card, disable it(RST&CLK)
[    1.899121]  -> 21007f2
[    1.901528] PCIE0 enabled
[    1.904116] PCIE1 enabled
[    1.906720] PCI host bridge /pcie@1e140000 ranges:
[    1.911495]  MEM 0x0000000060000000..0x000000006fffffff
[    1.916648]   IO 0x000000001e160000..0x000000001e16ffff
[    1.921855] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    1.937323] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.943165] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.948905] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.955902] PCI host bridge to bus 0000:00
[    1.959931] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    1.966767] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    1.972621] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    1.979382] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    1.988050] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    1.995972] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    2.005265] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.011800] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.018694] pci 0000:00:01.0: BAR 0: no space for [mem size 0x80000000]
[    2.025271] pci 0000:00:01.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.032168] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.038921] pci 0000:00:01.0: BAR 8: assigned [mem 0x60100000-0x601fffff]
[    2.045652] pci 0000:00:01.0: BAR 9: assigned [mem 0x60200000-0x602fffff pref]
[    2.052835] pci 0000:00:00.0: BAR 1: assigned [mem 0x60300000-0x6030ffff]
[    2.059565] pci 0000:00:01.0: BAR 1: assigned [mem 0x60310000-0x6031ffff]
[    2.066326] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff]
[    2.073035] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.077974] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.084712] pci 0000:02:00.0: BAR 0: assigned [mem 0x60100000-0x601fffff 64bit]
[    2.091985] pci 0000:02:00.0: BAR 6: assigned [mem 0x60200000-0x6020ffff pref]
[    2.099128] pci 0000:00:01.0: PCI bridge to [bus 02]
[    2.104084] pci 0000:00:01.0:   bridge window [mem 0x60100000-0x601fffff]
[    2.110790] pci 0000:00:01.0:   bridge window [mem 0x60200000-0x602fffff pref]
[    2.119373] clocksource: Switched to clocksource GIC
[    2.125858] NET: Registered protocol family 2
[    2.130973] TCP established hash table entries: 2048 (order: 1, 8192 bytes)
[    2.137858] TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
[    2.144286] TCP: Hash tables configured (established 2048 bind 2048)
[    2.150704] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.156466] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.162945] NET: Registered protocol family 1
[    2.399317] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    2.405841] Crashlog allocated RAM at address 0x3f00000
[    2.411289] workingset: timestamp_bits=30 max_order=16 bucket_order=0
[    2.419839] random: fast init done
[    2.427679] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.433489] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.446451] io scheduler noop registered
[    2.450316] io scheduler deadline registered (default)
[    2.455910] gpio-export gpio_export: 1 gpio(s) exported
[    2.461799] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[    2.469233] console [ttyS0] disabled
[    2.472852] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    2.481923] console [ttyS0] enabled
[    2.481923] console [ttyS0] enabled
[    2.488776] bootconsole [early0] disabled
[    2.488776] bootconsole [early0] disabled
[    2.497347] cacheinfo: Failed to find cpu0 device node
[    2.502529] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    2.509224] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.516371] Enable NFI Clock
[    2.519241] # MTK NAND # : Use HW ECC
[    2.522943] Device found in MTK table, ID: c8d1, EXT_ID: 809540
[    2.528840] Support this Device in MTK table! c8d1
[    2.533819] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.540295] nand: device found, Manufacturer ID: 0xc8, Chip ID: 0xd1
[    2.546616] nand: ESMT NAND 128MiB 3,3V 8-bit
[    2.550964] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    2.558513] Scanning device for bad blocks
[    2.661210]   on "MT7621-NAND":
[    2.755882] 0x000000000000-0x000000080000 : "Bootloader"
[    2.762146] 0x000000080000-0x0000000c0000 : "Config"
[    2.768012] 0x0000000c0000-0x000000100000 : "Bdata"
[    2.773936] 0x000000100000-0x000000140000 : "Factory"
[    2.780029] 0x000000140000-0x000000180000 : "crash"
[    2.785865] 0x000000180000-0x0000001c0000 : "crash_syslog"
[    2.792416] 0x0000001c0000-0x000000200000 : "reserved0"
[    2.798617] 0x000000200000-0x000000600000 : "kernel_stock"
[    2.805148] 0x000000600000-0x000000a00000 : "kernel"
[    2.811157] 0x000000a00000-0x000007f80000 : "ubi"
[    2.817777] [mtk_nand] probe successfully!
[    2.822610] Signature matched and data read!
[    2.826858] load_fact_bbt success 1023
[    2.831368] libphy: Fixed MDIO Bus: probed
[    2.901913] libphy: mdio: probed
[    4.305500] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    4.312125] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 20
[    4.322863] NET: Registered protocol family 10
[    4.328653] Segment Routing with IPv6
[    4.332449] NET: Registered protocol family 17
[    4.336917] 8021q: 802.1Q VLAN Support v1.8
[    4.344040] UBI: auto-attach mtd9
[    4.347373] ubi0: attaching mtd9
[    4.559988] UBI: EOF marker found, PEBs from 180 will be erased
[    4.566906] ubi0: scanning is finished
[    4.586526] ubi0 warning: do_sync_erase.part.4: error -5 while erasing PEB 939, retry
[    4.594407] ubi0 warning: do_sync_erase.part.4: error -5 while erasing PEB 939, retry
[    4.602292] ubi0 warning: do_sync_erase.part.4: error -5 while erasing PEB 939, retry
[    4.610149] ubi0 error: do_sync_erase.part.4: cannot erase PEB 939, error -5
[    4.617168] CPU: 1 PID: 1 Comm: swapper/0 Not tainted 4.14.79 #0
[    4.623145] Stack : 00000000 8f449b80 80533bf0 8006f554 805a0000 80541d84 00000000 00000000
[    4.631485]         8050f218 8fc35894 8fc4037c 8057a927 8050a308 00000001 8fc35838 1cc282af
[    4.639820]         00000000 00000000 805e0000 00003db8 00000000 000000ce 00000007 00000000
[    4.648153]         00000000 80580000 00096ad0 00000000 00000000 00000000 805a0000 802d9320
[    4.656485]         80530000 805e0000 fffffffb 8f449b80 00000003 802874a0 00000004 805e0004
[    4.664821]         ...
[    4.667259] Call Trace:
[    4.669718] [<800106c0>] show_stack+0x58/0x100
[    4.674157] [<8044f5bc>] dump_stack+0x9c/0xe0
[    4.678493] [<802dad78>] do_sync_erase.part.4+0x118/0x2ac
[    4.683873] [<802db258>] ubi_io_sync_erase+0x2ac/0x2e4
[    4.688989] [<802dbb18>] sync_erase.isra.4+0x150/0x25c
[    4.694108] [<802dc14c>] __erase_worker+0x4c/0x4b0
[    4.698877] [<802dc614>] erase_worker+0x64/0x8c
[    4.703392] [<802db670>] do_work+0xf8/0x13c
[    4.707557] [<802ddf0c>] ubi_wl_get_peb+0xcc/0x260
[    4.712330] [<802d69d8>] try_write_vid_and_data+0x54/0x200
[    4.717791] [<802d8258>] ubi_eba_atomic_leb_change+0x208/0x314
[    4.723602] [<802ce820>] ubi_update_layout_vol+0x40/0x74
[    4.728890] [<802ceedc>] ubi_change_vtbl_record+0xb0/0x104
[    4.734353] [<802d0e14>] ubi_resize_volume+0x254/0x4c4
[    4.739474] [<802d21e0>] autoresize+0x144/0x1cc
[    4.743985] [<802d338c>] ubi_attach_mtd_dev+0x734/0xbe8
[    4.749205] [<805b9d60>] ubi_init+0x2a8/0x360
[    4.753545] [<80005650>] do_one_initcall+0xd0/0x1a0
[    4.758419] [<805a2d78>] kernel_init_freeable+0x168/0x228
[    4.763814] [<804668dc>] kernel_init+0x10/0x10c
[    4.768325] [<8000b0d8>] ret_from_kernel_thread+0x14/0x1c
[    4.773807] ubi0 error: __erase_worker: failed to erase PEB 939, error -5
[    4.780600] ubi0: mark PEB 939 as bad