Look at nandmtd_EraseBlockInNAND and note that the erase address addr is 
calculated using nDataBytesPerChunk. Shouldn't this be 
dev->totalBytesPerChunk instead? nDataBytesPerChunk has the in-band tags 
subtracted from it.

Cal Page