diff --git a/panda b/panda
index bf2c007103..1a9a94c519 160000
--- a/panda
+++ b/panda
@@ -1 +1 @@
-Subproject commit bf2c0071036bae4e0c00c37ae43237fce6063e31
+Subproject commit 1a9a94c519cb74e9e0f57bea4d316a54c27ea8aa
diff --git a/selfdrive/boardd/tests/bootstub.panda.bin b/selfdrive/boardd/tests/bootstub.panda.bin
new file mode 100755
index 0000000000..43db537061
Binary files /dev/null and b/selfdrive/boardd/tests/bootstub.panda.bin differ
diff --git a/selfdrive/boardd/tests/bootstub.panda_h7.bin b/selfdrive/boardd/tests/bootstub.panda_h7.bin
new file mode 100755
index 0000000000..5cf2fa4519
Binary files /dev/null and b/selfdrive/boardd/tests/bootstub.panda_h7.bin differ
diff --git a/selfdrive/boardd/tests/test_pandad.py b/selfdrive/boardd/tests/test_pandad.py
index 50d24f4fe3..fff17523e3 100755
--- a/selfdrive/boardd/tests/test_pandad.py
+++ b/selfdrive/boardd/tests/test_pandad.py
@@ -1,16 +1,19 @@
 #!/usr/bin/env python3
+import os
 import time
 import unittest
 
 import cereal.messaging as messaging
 from cereal import log
 from common.gpio import gpio_set, gpio_init
-from panda import Panda
+from panda import Panda, PandaDFU
 from selfdrive.test.helpers import phone_only
 from selfdrive.manager.process_config import managed_processes
 from system.hardware import HARDWARE
 from system.hardware.tici.pins import GPIO
 
+HERE = os.path.dirname(os.path.realpath(__file__))
+
 
 class TestPandad(unittest.TestCase):
 
@@ -27,11 +30,13 @@ class TestPandad(unittest.TestCase):
     if sm['peripheralState'].pandaType == log.PandaState.PandaType.unknown:
       raise Exception("boardd failed to start")
 
+  def _go_to_dfu(self):
+    HARDWARE.recover_internal_panda()
+    assert Panda.wait_for_dfu(None, 10)
+
   @phone_only
   def test_in_dfu(self):
     HARDWARE.recover_internal_panda()
-    time.sleep(1)
-
     managed_processes['pandad'].start()
     self._wait_for_boardd(60)
 
@@ -66,9 +71,25 @@ class TestPandad(unittest.TestCase):
     managed_processes['pandad'].start()
     self._wait_for_boardd(8)
 
+  @phone_only
+  def test_release_to_devel_bootstub(self):
+    if HARDWARE.get_device_type() != 'tici':
+      self.skipTest("TODO: fix reset timeout")
+
+    # flash release bootstub
+    self._go_to_dfu()
+    pd = PandaDFU(None)
+    fn = os.path.join(HERE, pd.get_mcu_type().config.bootstub_fn)
+    with open(fn, "rb") as f:
+      pd.program_bootstub(f.read())
+    pd.reset()
+
+    assert Panda.wait_for_panda(None, 20)
+    with Panda() as p:
+      assert p.bootstub
 
-  #def test_out_of_date_fw(self):
-  #  pass
+    managed_processes['pandad'].start()
+    self._wait_for_boardd(60)
 
 
 if __name__ == "__main__":