I had success with holding down the mask button for a shorter period of time. Watch the output from the serial uart and release the mask button as soon as the booting from SD card starts. The eMMC will then be available and can be wiped/overwritten. Also this video shows RKDevtool working on the R5S...