[    2.012164] DSA: tree 0 setup
[    2.017234] ubi0: attaching mtd22
[    2.212030] ubi0: scanning is finished
[    2.212077] ubi0: empty MTD device detected
[    2.231650] ubi0: attached mtd22 (name "ubi", size 60 MiB)
[    2.231703] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    2.236052] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    2.242951] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    2.249782] ubi0: good PEBs: 480, bad PEBs: 0, corrupted PEBs: 0
[    2.256534] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
[    2.262813] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1597702326
[    2.269838] ubi0: available PEBs: 436, total reserved PEBs: 44, PEBs reserved for bad PEB handli▒[    2.316430] Freeing unused kernel image (initmem) memory: 15360K

root@OpenWrt:/# ubinfo -a
UBI version:                    1
Count of UBI devices:           1
UBI control device major/minor: 10:126
Present UBI devices:            ubi0

ubi0
Volumes count:                           0
Logical eraseblock size:                 126976 bytes, 124.0 KiB
Total amount of logical eraseblocks:     480 (60948480 bytes, 58.1 MiB)
Amount of available logical eraseblocks: 436 (55361536 bytes, 52.7 MiB)
Maximum count of volumes                 128
Count of bad physical eraseblocks:       0
Count of reserved physical eraseblocks:  40
Current maximum erase counter value:     1
Minimum input/output unit size:          2048 bytes
Character device major/minor:            246:0

root@OpenWrt:/# cd /tmp
root@OpenWrt:/tmp# sysupgrade -n openwrt-ipq40xx-generic-netgear_lbr20-squashfs-
sysupgrade.bin
Thu Jan  1 00:07:34 UTC 1970 upgrade: Commencing upgrade. Closing all shell sessions.
Watchdog handover: fd=3
- watchdog -
Watchdog did not previously reset the system
Thu Jan  1 00:07:34 UTC 1970 upgrade: Sending TERM to remaining processes ...
Thu Jan  1 00:07:39 UTC 1970 upgrade: Sending KILL to remaining processes ...
[  465.210682] stage2 (2338): drop_caches: 3
Thu Jan  1 00:07:45 UTC 1970 upgrade: Switching to ramdisk...
Thu Jan  1 00:07:47 UTC 1970 upgrade: Performing system upgrade...
grep: /sys/block/mmcblk*/mmcblk*p*/uevent: No such file or directory
grep: /sys/block/mmcblk*/mmcblk*p*/uevent: No such file or directory
Upgrade failed: kernel partition not found! R▒

 nmrp server is stopped or failed !
Loading DNI firmware for checking...
Loading firmware 1 ...

NAND read: device 0 offset 0xa600000, size 0x20000
 131072 bytes read: OK

NAND read: device 0 offset 0xa600000, size 0x480000
 4718592 bytes read: OK
rootfs imge header corrupted !
Loading firmware 2 ...

NAND read: device 0 offset 0xa600000, size 0x20000
 131072 bytes read: OK

NAND read: device 0 offset 0xa600000, size 0x480000
 4718592 bytes read: OK
rootfs imge header corrupted !
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex

Firmware recovering from TFTP server is stopped or failed! :(
## Booting kernel from FIT Image at 84000000 ...
   Using 'config@1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM OpenWrt Linux-6.1.73
     Type:         Kernel Image
     Compression:  gzip compressed
     Data Start:   0x840000e4
     Data Size:    4592661 Bytes = 4.4 MiB
     Architecture: ARM
     OS:           Linux
     Load Address: 0x80208000
     Entry Point:  0x80208000
     Hash algo:    crc32
     Hash value:   7e9027fc
     Hash algo:    sha1
     Hash value:   bb93189f40c8b46130de75acb29657a7783c052f
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Flattened Device Tree from FIT Image at 84000000
   Using 'config@1' configuration
   Trying 'fdt-1' FDT blob subimage
     Description:  ARM OpenWrt netgear_lbr20 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x84461634
     Data Size:    20177 Bytes = 19.7 KiB
     Architecture: ARM
     Hash algo:    crc32
     Hash value:   0bade00f
     Hash algo:    sha1
     Hash value:   2f824025c3cb3b436deea772d787d25929293ed3
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x84461634
   Uncompressing Kernel Image ... OK
   Loading Device Tree to 86ff8000, end 86fffed0 ... OK
Device nand2 not found!

 131072 bytes read: OK
Using machid 0x8010001 from environment

Starting kernel ...

 nmrp server is stopped or failed !
Loading DNI firmware for checking...
Loading firmware 1 ...

NAND read: device 0 offset 0xa600000, size 0x20000
 131072 bytes read: OK

NAND read: device 0 offset 0xa600000, size 0x1020000
 16908288 bytes read: OK
rootfs imge header corrupted !
Loading firmware 2 ...

NAND read: device 0 offset 0xa600000, size 0x20000
 131072 bytes read: OK

NAND read: device 0 offset 0xa600000, size 0x1020000
 16908288 bytes read: OK
rootfs imge header corrupted !
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex

Firmware recovering from TFTP server is stopped or failed! :(
Wrong Image Format for bootm command
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex

Firmware recovering from TFTP server is stopped or failed! :(
ERROR: can't get kernel image!
(IPQ40xx) #

#!/bin/sh /etc/rc.common

################################################################################
### this script is a sample, please modify it for your projects!!!
################################################################################

START=11

[ -f "/module_name" ] \
    && model="$(tr '[:lower:]' '[:upper:]' </module_name)" \
    || model="$(artmtd -r board_model_id | awk -F ":" '{print 2}')"
[ -f "/hw_id" ] \
    && hw_id="$(cat /hw_id)" \
    || hw_id="$(artmtd -r board_hw_id | awk -F ":" '{print $2}')"
[ -f "/flash_type" ] \
    && storage_type="$([ "$(cat /flash_type)" = "EMMC" ] && echo EMMC || echo NAND)" \
    || storage_type="$(grep -q firmware /proc/mtd && echo NAND || echo EMMC)"

opt_args=""
# fwupgd_debug should be set to "on" in env to run in debug mode.
[ "$fwupgd_debug" = "on" ] && opt_args='$opt_args -d'

start ()
{
    [ ! -d /tmp/fwupg ] && mkdir -p /tmp/fwupg

    case "$model" in
    "XR500")
        fwupgd    $opt_args \
            -M "$model" \
            -I "$hw_id" \
            -S "$storage_type" \
            -P "/dev/$(awk -F":" '/firmware/ {print $1}' /proc/mtd)" \
            -L "/dev/$(awk -F":" '/language/ {print $1}' /proc/mtd)" \
            -m 10 \
            -s 262144 \
        ;;
    "RBR50"|"RBS50"|"RBR40"|"RBS40")
        fwupgd    $opt_args \
            -M "$model" \
            -I "$hw_id" \
            -S "$storage_type" \
            -P "$(part_dev firmware)" \
            -B "$(part_dev firmware2)" \
            -L "$(part_dev language)" \
            -m 6 \
            -s 204800 \
            -F 2 \
        ;;
    "RBR20"|"RBS20"|"LBR20"|"LBR10"|"LBR1020")
        fwupgd    $opt_args \
            -M "$model" \
            -I "$hw_id" \
            -S "$storage_type" \
            -P "$(part_dev firmware)" \
            -L "$(part_dev language)" \
            -m 6 \
            -s 204800 \
        ;;
    *)
        echo "[fwupgd-ERROR] can not identify board module!!!"
        ;;
    esac
}

stop ()
{
    killall -SIGKILL fwupgd
}

restart()
{
    stop
    start
}

#! /bin/sh

# command to write firmware image to flash

# ${1} is path of firmware partition device
# ${2} is path of firmware image file
# e.g.: do_imgwrite.sh /dev/mtd8 /tmp/XXX.img
nandwrite --input-skip=128 -p -m -q ${1} ${2}

/sbin/fwupgd
/sbin/fwupg
/etc/init.d/fwupgd

[ "$(/bin/config get fwupgrade_performed)" = "1" ] && /bin/config set fwupgrade_performed=0

mtd27: 0020f000 0001f000 "vol_traffic"
mtd28: 0020f000 0001f000 "vol_traffic.bak"
mtd29: 00516000 0001f000 "vol_devtable"
mtd30: 0009b000 0001f000 "vol_oopsdump"
mtd31: 01e08000 0001f000 "vol_circle"
mtd32: 04107000 0001f000 "vol_ntgr"
mtd33: 0020f000 0001f000 "vol_rae"
mtd34: 00516000 0001f000 "vol_arlo"
mtd35: 0020f000 0001f000 "vol_traffic_mobile"
mtd36: 0020f000 0001f000 "vol_traffic_mobile.bak"
mtd37: 00516000 0001f000 "vol_ntgrcrydata"
mtd38: 00117000 0001f000 "vol_jdx"