[Tilt, TyTN II, MDA Vario III Android Development] alg5:
Interesting tips:

creation of initrd:

find . | cpio -H newc -o | gzip -9 >initrd.gz​

According to diamond users:

Start from a mobile with activesync activated when launching haret. Seems to work worst on my kaiser setup.

And use a complete android software (only limited initrd seems not working). Ok.
​

I just checked the status, and it is following (as posted by someone else):

/proc/psfreedom/status say : DEVICE5_WAIT_READY

If you want to try my kernel and module:

hxxp://darcelf.free.fr/psfreedom_kaiser.zip

I have activated all the debug informations, so i can compare with psfreedom example output (psfreedom.com/news.php?readmore=107)

Current output with debug and grepped with "PSFreedom":

[ 189.763899] PSFreedom gadget: PS3 Jailbreak exploit, version: 1.1 - 19 October 2010

[ 189.763941] PSFreedom gadget: Loading firmware 3.41

[ 189.763973] PSFreedom gadget: Setting up descriptors for 3.41

[ 189.764009] PSFreedom gadget: Loading default payload and shellcode for 3.41

[ 189.764156] PSFreedom gadget: using msm72k_udc, EP IN ep2in

[ 189.764204] PSFreedom gadget: using msm72k_udc, EP IN ep1in (0x81)

[ 189.764239] PSFreedom gadget: using msm72k_udc, EP OUT ep2out (0x2)

[ 189.764269] PSFreedom gadget: psfreedom_bind finished ok

[ 189.764301] PSFreedom gadget: Got disconnected

[ 189.764329] PSFreedom gadget: reset config

[ 189.764359] PSFreedom gadget: JIG reset config

[ 189.764509] PSFreedom gadget: /proc/psfreedom/status created

[ 189.764551] PSFreedom gadget: /proc/psfreedom/version created

[ 189.764609] PSFreedom gadget: /proc/psfreedom/payload created

[ 189.764651] PSFreedom gadget: /proc/psfreedom/shellcode created

[ 189.764694] PSFreedom gadget: /proc/psfreedom/supported_firmwares created

[ 189.764736] PSFreedom gadget: /proc/psfreedom/fw_version created

[ 189.764778] PSFreedom gadget: /proc/psfreedom/asbestos_stage2 created

[ 189.764823] PSFreedom gadget: /proc/psfreedom/jig_mode created

[ 189.764874] msm72k_udc: registered gadget driver 'PSFreedom'

[ 189.789769] PSFreedom gadget: proc_payload_write (/proc/psfreedom/payload) called. count 4008

[ 189.801306] PSFreedom gadget: Got disconnected

[ 189.801344] PSFreedom gadget: reset config

[ 189.801378] PSFreedom gadget: JIG reset config

[ 189.801804] PSFreedom gadget: Got disconnected

[ 189.801831] PSFreedom gadget: reset config

[ 189.801858] PSFreedom gadget: JIG reset config

[ 199.100081] PSFreedom gadget: proc_payload_write (/proc/psfreedom/payload) called. count 4008

[ 235.581776] PSFreedom gadget: Got disconnected

[ 235.581813] PSFreedom gadget: reset config

[ 235.581844] PSFreedom gadget: JIG reset config

[ 238.843299] PSFreedom gadget: INIT Setup called GET_DESCRIPTOR (256 - 0) -> 8 (w_length=8)

[ 238.854263] PSFreedom gadget: INIT Setup called GET_DESCRIPTOR (256 - 0) -> 18 (w_length=18)

[ 238.858298] PSFreedom gadget: INIT Setup called GET_DESCRIPTOR (512 - 0) -> 8 (w_length=8)

[ 238.869319] PSFreedom gadget: INIT Setup called GET_DESCRIPTOR (512 - 0) -> 25 (w_length=25)

[ 238.870318] PSFreedom gadget: reset config

[ 238.870363] PSFreedom gadget: full speed

[ 238.870398] PSFreedom gadget: INIT Setup called SET_CONFIGURATION (1 - 0) -> 0 (w_length=0)

[ 238.871343] PSFreedom gadget: INIT Setup called GET_HUB_DESCRIPTOR (10496 - 0) -> 9 (w_length=32)

[ 238.872361] PSFreedom gadget: SetPortFeature PORT_POWER called

[ 238.872401] PSFreedom gadget: INIT Setup called SET_PORT_FEATURE (8 - 1) -> 0 (w_length=0)

[ 238.972833] PSFreedom gadget: SetPortFeature PORT_POWER called

[ 238.972876] PSFreedom gadget: INIT Setup called SET_PORT_FEATURE (8 - 2) -> 0 (w_length=0)

[ 239.073829] PSFreedom gadget: SetPortFeature PORT_POWER called

[ 239.073871] PSFreedom gadget: INIT Setup called SET_PORT_FEATURE (8 - 3) -> 0 (w_length=0)

[ 239.174846] PSFreedom gadget: SetPortFeature PORT_POWER called

[ 239.174906] PSFreedom gadget: INIT Setup called SET_PORT_FEATURE (8 - 4) -> 0 (w_length=0)

[ 239.275856] PSFreedom gadget: SetPortFeature PORT_POWER called

[ 239.275929] PSFreedom gadget: INIT Setup called SET_PORT_FEATURE (8 - 5) -> 0 (w_length=0)

[ 239.376831] PSFreedom gadget: SetPortFeature PORT_POWER called

[ 239.376876] PSFreedom gadget: Setting timer to 150ms

[ 239.376923] PSFreedom gadget: HUB_READY Setup called SET_PORT_FEATURE (8 - 6) -> 0 (w_length=0)

[ 239.526146] PSFreedom gadget: Timer fired, status is HUB_READY

[ 239.526204] PSFreedom gadget: transmitting interrupt byte 0x2

[ 239.533544] PSFreedom gadget: Hub interrupt complete (status 0)

[ 239.533821] PSFreedom gadget: GetHub/PortStatus: transmtiting status 259 change 1

[ 239.533866] PSFreedom gadget: DEVICE1_WAIT_READY Setup called GET_PORT_STATUS (0 - 1) -> 4 (w_length=4)

[ 239.634831] PSFreedom gadget: ClearPortFeature C_PORT_CONNECTION called

[ 239.634879] PSFreedom gadget: DEVICE1_WAIT_READY Setup called CLEAR_PORT_FEATURE (16 - 1) -> 0 (w_length=0)

[ 239.735848] PSFreedom gadget: GetHub/PortStatus: transmtiting status 259 change 0

[ 239.735904] PSFreedom gadget: DEVICE1_WAIT_READY Setup called GET_PORT_STATUS (0 - 1) -> 4 (w_length=4)

[ 239.736824] PSFreedom gadget: SetPortFeature PORT_RESET called

[ 239.736871] PSFreedom gadget: transmitting interrupt byte 0x2

[ 239.736919] PSFreedom gadget: DEVICE1_WAIT_READY Setup called SET_PORT_FEATURE (4 - 1) -> 0 (w_length=0)

[ 239.741533] PSFreedom gadget: Hub interrupt complete (status 0)

[ 239.741813] PSFreedom gadget: GetHub/PortStatus: transmtiting status 259 change 16

[ 239.741856] PSFreedom gadget: DEVICE1_WAIT_READY Setup called GET_PORT_STATUS (0 - 1) -> 4 (w_length=4)

[ 239.742811] PSFreedom gadget: ClearPortFeature C_PORT_RESET called

[ 239.742846] PSFreedom gadget: Setting timer to 0ms

[ 239.742886] PSFreedom gadget: DEVICE1_WAIT_READY Setup called CLEAR_PORT_FEATURE (20 - 1) -> 0 (w_length=0)

[ 239.742973] PSFreedom gadget: Timer fired, status is DEVICE1_WAIT_READY

[ 239.743014] PSFreedom gadget: Switching to port 1. Address is 0

[ 239.756921] PSFreedom gadget: DEVICE1_WAIT_READY Setup called GET_DESCRIPTOR (256 - 0) -> 8 (w_length=8)

[ 239.767899] PSFreedom gadget: DEVICE1_WAIT_READY Setup called GET_DESCRIPTOR (256 - 0) -> 18 (w_length=18)

[ 239.771938] PSFreedom gadget: DEVICE1_WAIT_READY Setup called GET_DESCRIPTOR (512 - 0) -> 8 (w_length=8)

[ 239.782999] PSFreedom gadget: DEVICE1_WAIT_READY Setup called GET_DESCRIPTOR (512 - 0) -> 4096 (w_length=4096)

[ 239.788008] PSFreedom gadget: DEVICE1_WAIT_READY Setup called GET_DESCRIPTOR (513 - 0) -> 8 (w_length=8)

[ 239.799066] PSFreedom gadget: DEVICE1_WAIT_READY Setup called GET_DESCRIPTOR (513 - 0) -> 4096 (w_length=4096)

[ 239.804068] PSFreedom gadget: DEVICE1_WAIT_READY Setup called GET_DESCRIPTOR (514 - 0) -> 8 (w_length=8)

[ 239.815111] PSFreedom gadget: DEVICE1_WAIT_READY Setup called GET_DESCRIPTOR (514 - 0) -> 4096 (w_length=4096)

[ 239.820131] PSFreedom gadget: DEVICE1_WAIT_READY Setup called GET_DESCRIPTOR (515 - 0) -> 8 (w_length=8)

[ 239.831146] PSFreedom gadget: Setting timer to 100ms

[ 239.831191] PSFreedom gadget: DEVICE1_READY Setup called GET_DESCRIPTOR (515 - 0) -> 4096 (w_length=4096)

[ 239.926146] PSFreedom gadget: Timer fired, status is DEVICE1_READY

[ 239.926193] PSFreedom gadget: Switching to port 0. Address is 2

[ 239.926233] PSFreedom gadget: transmitting interrupt byte 0x4

[ 239.933541] PSFreedom gadget: Hub interrupt complete (status 0)

[ 239.933823] PSFreedom gadget: GetHub/PortStatus: transmtiting status 259 change 1

[ 239.933874] PSFreedom gadget: DEVICE2_WAIT_READY Setup called GET_PORT_STATUS (0 - 2) -> 4 (w_length=4)

[ 240.034824] PSFreedom gadget: ClearPortFeature C_PORT_CONNECTION called

[ 240.034874] PSFreedom gadget: DEVICE2_WAIT_READY Setup called CLEAR_PORT_FEATURE (16 - 2) -> 0 (w_length=0)

[ 240.135853] PSFreedom gadget: GetHub/PortStatus: transmtiting status 259 change 0

[ 240.135919] PSFreedom gadget: DEVICE2_WAIT_READY Setup called GET_PORT_STATUS (0 - 2) -> 4 (w_length=4)

[ 240.136824] PSFreedom gadget: SetPortFeature PORT_RESET called

[ 240.136871] PSFreedom gadget: transmitting interrupt byte 0x4

[ 240.136918] PSFreedom gadget: DEVICE2_WAIT_READY Setup called SET_PORT_FEATURE (4 - 2) -> 0 (w_length=0)

[ 240.141533] PSFreedom gadget: Hub interrupt complete (status 0)

[ 240.141809] PSFreedom gadget: GetHub/PortStatus: transmtiting status 259 change 16

[ 240.141856] PSFreedom gadget: DEVICE2_WAIT_READY Setup called GET_PORT_STATUS (0 - 2) -> 4 (w_length=4)

[ 240.142804] PSFreedom gadget: ClearPortFeature C_PORT_RESET called

[ 240.142841] PSFreedom gadget: Setting timer to 0ms

[ 240.142883] PSFreedom gadget: DEVICE2_WAIT_READY Setup called CLEAR_PORT_FEATURE (20 - 2) -> 0 (w_length=0)

[ 240.142973] PSFreedom gadget: Timer fired, status is DEVICE2_WAIT_READY

[ 240.143014] PSFreedom gadget: Switching to port 2. Address is 0

[ 240.156884] PSFreedom gadget: DEVICE2_WAIT_READY Setup called GET_DESCRIPTOR (256 - 0) -> 8 (w_length=8)

[ 240.167893] PSFreedom gadget: DEVICE2_WAIT_READY Setup called GET_DESCRIPTOR (256 - 0) -> 18 (w_length=18)

[ 240.171934] PSFreedom gadget: DEVICE2_WAIT_READY Setup called GET_DESCRIPTOR (512 - 0) -> 8 (w_length=8)

[ 240.182954] PSFreedom gadget: Setting timer to 150ms

[ 240.182999] PSFreedom gadget: DEVICE2_READY Setup called GET_DESCRIPTOR (512 - 0) -> 22 (w_length=22)

[ 240.326158] PSFreedom gadget: Timer fired, status is DEVICE2_READY

[ 240.326224] PSFreedom gadget: Switching to port 0. Address is 2

[ 240.326269] PSFreedom gadget: transmitting interrupt byte 0x8

[ 240.333551] PSFreedom gadget: Hub interrupt complete (status 0)

[ 240.333828] PSFreedom gadget: GetHub/PortStatus: transmtiting status 259 change 1

[ 240.333878] PSFreedom gadget: DEVICE3_WAIT_READY Setup called GET_PORT_STATUS (0 - 3) -> 4 (w_length=4)

[ 240.434823] PSFreedom gadget: ClearPortFeature C_PORT_CONNECTION called

[ 240.434869] PSFreedom gadget: DEVICE3_WAIT_READY Setup called CLEAR_PORT_FEATURE (16 - 3) -> 0 (w_length=0)

[ 240.535821] PSFreedom gadget: GetHub/PortStatus: transmtiting status 259 change 0

[ 240.535868] PSFreedom gadget: DEVICE3_WAIT_READY Setup called GET_PORT_STATUS (0 - 3) -> 4 (w_length=4)

[ 240.536814] PSFreedom gadget: SetPortFeature PORT_RESET called

[ 240.536854] PSFreedom gadget: transmitting interrupt byte 0x8

[ 240.536901] PSFreedom gadget: DEVICE3_WAIT_READY Setup called SET_PORT_FEATURE (4 - 3) -> 0 (w_length=0)

[ 240.541531] PSFreedom gadget: Hub interrupt complete (status 0)

[ 240.541806] PSFreedom gadget: GetHub/PortStatus: transmtiting status 259 change 16

[ 240.541849] PSFreedom gadget: DEVICE3_WAIT_READY Setup called GET_PORT_STATUS (0 - 3) -> 4 (w_length=4)

[ 240.542801] PSFreedom gadget: ClearPortFeature C_PORT_RESET called

[ 240.542836] PSFreedom gadget: Setting timer to 0ms

[ 240.542879] PSFreedom gadget: DEVICE3_WAIT_READY Setup called CLEAR_PORT_FEATURE (20 - 3) -> 0 (w_length=0)

[ 240.542968] PSFreedom gadget: Timer fired, status is DEVICE3_WAIT_READY

[ 240.543008] PSFreedom gadget: Switching to port 3. Address is 0

[ 240.556878] PSFreedom gadget: DEVICE3_WAIT_READY Setup called GET_DESCRIPTOR (256 - 0) -> 8 (w_length=8)

[ 240.567886] PSFreedom gadget: DEVICE3_WAIT_READY Setup called GET_DESCRIPTOR (256 - 0) -> 18 (w_length=18)

[ 240.571954] PSFreedom gadget: DEVICE3_WAIT_READY Setup called GET_DESCRIPTOR (512 - 0) -> 8 (w_length=8)

[ 240.582969] PSFreedom gadget: DEVICE3_WAIT_READY Setup called GET_DESCRIPTOR (512 - 0) -> 2637 (w_length=2637)

[ 240.587043] PSFreedom gadget: DEVICE3_WAIT_READY Setup called GET_DESCRIPTOR (513 - 0) -> 8 (w_length=8)

[ 240.598053] PSFreedom gadget: Setting timer to 80ms

[ 240.598096] PSFreedom gadget: DEVICE3_READY Setup called GET_DESCRIPTOR (513 - 0) -> 2637 (w_length=2637)

[ 240.676141] PSFreedom gadget: Timer fired, status is DEVICE3_READY

[ 240.676196] PSFreedom gadget: Switching to port 0. Address is 2

[ 240.676238] PSFreedom gadget: transmitting interrupt byte 0x4

[ 240.677543] PSFreedom gadget: Hub interrupt complete (status 0)

[ 240.677814] PSFreedom gadget: GetHub/PortStatus: transmtiting status 256 change 1

[ 240.677863] PSFreedom gadget: DEVICE2_WAIT_DISCONNECT Setup called GET_PORT_STATUS (0 - 2) -> 4 (w_length=4)

[ 240.778848] PSFreedom gadget: ClearPortFeature C_PORT_CONNECTION called

[ 240.778918] PSFreedom gadget: Setting timer to 170ms

[ 240.778966] PSFreedom gadget: DEVICE2_DISCONNECTED Setup called CLEAR_PORT_FEATURE (16 - 2) -> 0 (w_length=0)

[ 240.879826] PSFreedom gadget: GetHub/PortStatus: transmtiting status 256 change 0

[ 240.879879] PSFreedom gadget: DEVICE2_DISCONNECTED Setup called GET_PORT_STATUS (0 - 2) -> 4 (w_length=4)

[ 240.946144] PSFreedom gadget: Timer fired, status is DEVICE2_DISCONNECTED

[ 240.946196] PSFreedom gadget: transmitting interrupt byte 0x10

[ 240.949549] PSFreedom gadget: Hub interrupt complete (status 0)

[ 240.949809] PSFreedom gadget: GetHub/PortStatus: transmtiting status 259 change 1

[ 240.949859] PSFreedom gadget: DEVICE4_WAIT_READY Setup called GET_PORT_STATUS (0 - 4) -> 4 (w_length=4)

[ 241.050874] PSFreedom gadget: ClearPortFeature C_PORT_CONNECTION called

[ 241.050979] PSFreedom gadget: DEVICE4_WAIT_READY Setup called CLEAR_PORT_FEATURE (16 - 4) -> 0 (w_length=0)

[ 241.151871] PSFreedom gadget: GetHub/PortStatus: transmtiting status 259 change 0

[ 241.151963] PSFreedom gadget: DEVICE4_WAIT_READY Setup called GET_PORT_STATUS (0 - 4) -> 4 (w_length=4)

[ 241.152818] PSFreedom gadget: SetPortFeature PORT_RESET called

[ 241.152868] PSFreedom gadget: transmitting interrupt byte 0x10

[ 241.152918] PSFreedom gadget: DEVICE4_WAIT_READY Setup called SET_PORT_FEATURE (4 - 4) -> 0 (w_length=0)

[ 241.157548] PSFreedom gadget: Hub interrupt complete (status 0)

[ 241.157798] PSFreedom gadget: GetHub/PortStatus: transmtiting status 259 change 16

[ 241.157844] PSFreedom gadget: DEVICE4_WAIT_READY Setup called GET_PORT_STATUS (0 - 4) -> 4 (w_length=4)

[ 241.158794] PSFreedom gadget: ClearPortFeature C_PORT_RESET called

[ 241.158831] PSFreedom gadget: Setting timer to 0ms

[ 241.158876] PSFreedom gadget: DEVICE4_WAIT_READY Setup called CLEAR_PORT_FEATURE (20 - 4) -> 0 (w_length=0)

[ 241.158976] PSFreedom gadget: Timer fired, status is DEVICE4_WAIT_READY

[ 241.159023] PSFreedom gadget: Switching to port 4. Address is 0

[ 241.172871] PSFreedom gadget: DEVICE4_WAIT_READY Setup called GET_DESCRIPTOR (256 - 0) -> 8 (w_length=8)

[ 241.183888] PSFreedom gadget: DEVICE4_WAIT_READY Setup called GET_DESCRIPTOR (256 - 0) -> 18 (w_length=18)

[ 241.187946] PSFreedom gadget: DEVICE4_WAIT_READY Setup called GET_DESCRIPTOR (512 - 0) -> 8 (w_length=8)

[ 241.198963] PSFreedom gadget: DEVICE4_WAIT_READY Setup called GET_DESCRIPTOR (512 - 0) -> 18 (w_length=18)

[ 241.199966] PSFreedom gadget: DEVICE4_WAIT_READY Setup called GET_DESCRIPTOR (513 - 0) -> 8 (w_length=8)

[ 241.210983] PSFreedom gadget: DEVICE4_WAIT_READY Setup called GET_DESCRIPTOR (513 - 0) -> 18 (w_length=18)

[ 241.211998] PSFreedom gadget: DEVICE4_WAIT_READY Setup called GET_DESCRIPTOR (514 - 0) -> 8 (w_length=8)

[ 241.223016] PSFreedom gadget: Setting timer to 180ms

[ 241.223059] PSFreedom gadget: DEVICE4_READY Setup called GET_DESCRIPTOR (514 - 0) -> 48 (w_length=48)

[ 241.396154] PSFreedom gadget: Timer fired, status is DEVICE4_READY

[ 241.396243] PSFreedom gadget: Switching to port 0. Address is 2

[ 241.396291] PSFreedom gadget: transmitting interrupt byte 0x20

[ 241.397561] PSFreedom gadget: Hub interrupt complete (status 0)

We are stuck here. According to the official trace, we should continue with following PSFreedom debug info:

PSFreedom gadget: GetHub/PortStatus: transmtiting status 1283 change 1

PSFreedom gadget: DEVICE5_WAIT_READY Setup called GET_PORT_STATUS (0 - 5) -> 4 (w_length=4)

...

Currently i have no clues what trigger the GetHub/PortStatus