A friend of mine recently downgraded to 2.1 without any backup, and after dumping the OTP file, he upgraded using cartidge, thus got a old 3DS with a system version of 9.5.0-4J.
So the question is, is there any method of entering HBL (then downgrade to 9.1)? We've tried ninjhax2 and browserhax...