Re: MBIM Patch (Round 3)

[Gerhard Roth]

On 10.06.2016 14:41, Bryan Vyhmeister wrote:

On Fri, Jun 10, 2016 at 09:43:36AM +0200, Gerhard Roth wrote:

Hmm, I don't see the missing break. It is still stuck in the same
state trying to turn on the radio and always getting non-confirmative
resonses.

If the break before "case UMB_S_RADIO:" is missing, I would expect
to see a debug printf "umb0: init: checking SIM state ...".
Could you please check once again?

From a previous email you said to comment out the break after "case

UMB_S_RADIO" which did not have any effect. Commenting out the break
after "case UMB_S_OPEN" as I believe you are saying above did have an
effect.


        case UMB_S_OPEN:
                DPRINTF("%s: init: turning radio on ...\n", DEVNAM(sc));
                umb_radio(sc, 1);
                // break;
        case UMB_S_RADIO:
                DPRINTF("%s: init: checking SIM state ...\n", DEVNAM(sc));
                umb_cmd(sc, MBIM_CID_SUBSCRIBER_READY_STATUS, MBIM_CMDOP_QRY,
                    NULL, 0);
                break;
        case UMB_S_SIMREADY:
                DPRINTF("%s: init: attaching ...\n", DEVNAM(sc));
                umb_packet_service(sc, 1);
                break;

The error code is rather generic and gives us no help to
determine why exactly the device refuses to turn on the
radio. But it reports that the hw-state is on, which means
we can at least exclude any rfkill switch ;)

So why does the firmware refuse to turn it on? Could still
be a problem of the PIN-less SIM card you're using.

With the break commented out above I now see this output from ifconfig
umb0 (sensitive info with XXX):

umb0: flags=8811<UP,POINTOPOINT,SIMPLEX,MULTICAST> mtu 1500
        index 5 priority 0
        roaming disabled registration not registered
        state SIM is ready cell-class none
        SIM initialized PIN valid (3 attempts left)
        subscriber-id XXXXXXXX ICC-id XXXXXXXXXX
        device EM7455 IMEI 014582000 firmware SWI9X30C_02.08.
        phone# ++XXXXXXXXXX APN broadband
        status: down

I have not seen the first ten digits of the SIM card's phone number, the
subscriber-id, or the ICC-id in ifconfig output before so that seems
promising. Could this be something like needing the FCC auth? The debug
output follows. Thank you!

Well, the device still refuses to turn on the radio and without it,
there's no chance to register with the provider.

That you see more information now is just due to the fact, that the
state machine now continues beyond the "turn radio on" step.

You might try the FCC auth patch, but I'm not very confident about
it in your situation. Your device already speaks MBIM, so why should
we need to enable it.

I haven't got the slightest clue, why it refuses to turn on the radio.
It might be related to the type of SIM card. But honestly, I don't know.

Bryan



OpenBSD 6.0-beta (GENERIC.MP) #1: Fri Jun 10 04:25:48 PDT 2016
    r...@x.brycv.com:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 17024274432 (16235MB)
avail mem = 16503758848 (15739MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.8 @ 0xb7c01000 (66 entries)
bios0: vendor LENOVO version "R02ET44W (1.17 )" date 01/25/2016
bios0: LENOVO 20F6CTO1WW
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP UEFI SSDT SSDT ECDT HPET APIC MCFG SSDT SSDT DBGP DBG2 
BOOT BATB SSDT SSDT MSDM DMAR ASF! FPDT UEFI
acpi0: wakeup devices LID_(S4) SLPB(S3) IGBE(S4) PXSX(S4) PXSX(S4) PXSX(S4) 
PXSX(S4) EXP8(S4) PXSX(S4) XHCI(S3)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpiec0 at acpi0
acpihpet0 at acpi0: 23999999 Hz
acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i7-6600U CPU @ 2.60GHz, 2485.32 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,SENSOR,ARAT
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 24MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4.1.1.1, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Core(TM) i7-6600U CPU @ 2.60GHz, 2494.21 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,SENSOR,ARAT
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 1 (application processor)
cpu2: Intel(R) Core(TM) i7-6600U CPU @ 2.60GHz, 2494.21 MHz
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,SENSOR,ARAT
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 1, core 0, package 0
cpu3 at mainbus0: apid 3 (application processor)
cpu3: Intel(R) Core(TM) i7-6600U CPU @ 2.60GHz, 2494.21 MHz
cpu3: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,SENSOR,ARAT
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 1, core 1, package 0
ioapic0 at mainbus0: apid 2 pa 0xfec00000, version 20, 120 pins
acpimcfg0 at acpi0 addr 0xf8000000, bus 0-63
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PEG0)
acpiprt2 at acpi0: bus -1 (PEG1)
acpiprt3 at acpi0: bus -1 (PEG2)
acpiprt4 at acpi0: bus 2 (EXP1)
acpiprt5 at acpi0: bus 4 (EXP3)
acpiprt6 at acpi0: bus -1 (EXP4)
acpiprt7 at acpi0: bus -1 (EXP5)
acpiprt8 at acpi0: bus -1 (EXP8)
acpicpu0 at acpi0: C3(200@1034 mwait.1@0x60), C2(200@151 mwait.1@0x33), 
C1(1000@1 mwait.1), PSS
acpicpu1 at acpi0: C3(200@1034 mwait.1@0x60), C2(200@151 mwait.1@0x33), 
C1(1000@1 mwait.1), PSS
acpicpu2 at acpi0: C3(200@1034 mwait.1@0x60), C2(200@151 mwait.1@0x33), 
C1(1000@1 mwait.1), PSS
acpicpu3 at acpi0: C3(200@1034 mwait.1@0x60), C2(200@151 mwait.1@0x33), 
C1(1000@1 mwait.1), PSS
acpipwrres0 at acpi0: PUBS, resource for XHCI
acpipwrres1 at acpi0: PG00, resource for PEG0
acpipwrres2 at acpi0: PG01, resource for PEG1
acpipwrres3 at acpi0: PG02, resource for PEG2
acpipwrres4 at acpi0: WRST
acpipwrres5 at acpi0: WRST
acpitz0 at acpi0: critical temperature is 128 degC
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: SLPB
"LEN0071" at acpi0 not configured
"LEN2014" at acpi0 not configured
"INT3F0D" at acpi0 not configured
acpibat0 at acpi0: BAT0 model "45N1113" serial  4020 type LION oem "LGC"
acpibat1 at acpi0: BAT1 model "45N1738" serial  2903 type LION oem "LGC"
acpiac0 at acpi0: AC unit online
acpithinkpad0 at acpi0
"PNP0C14" at acpi0 not configured
"PNP0C14" at acpi0 not configured
"PNP0C14" at acpi0 not configured
"INT3394" at acpi0 not configured
acpivideo0 at acpi0: GFX0
acpivout at acpivideo0 not configured
cpu0: Enhanced SpeedStep 2485 MHz: speeds: 2701, 2700, 2600, 2500, 2300, 2100, 
1900, 1800, 1600, 1400, 1300, 1100, 800, 700, 600, 400 MHz
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel Core 6G Host" rev 0x08
"Intel HD Graphics 520" rev 0x07 at pci0 dev 2 function 0 not configured
xhci0 at pci0 dev 20 function 0 "Intel 100 Series xHCI" rev 0x21: msi
usb0 at xhci0: USB revision 3.0
uhub0 at usb0 "Intel xHCI root hub" rev 3.00/1.00 addr 1
pchtemp0 at pci0 dev 20 function 2 "Intel 100 Series Thermal" rev 0x21
"Intel 100 Series MEI" rev 0x21 at pci0 dev 22 function 0 not configured
ahci0 at pci0 dev 23 function 0 "Intel 100 Series AHCI" rev 0x21: msi, AHCI 
1.3.1
ahci0: port 1: 6.0Gb/s
scsibus1 at ahci0: 32 targets
sd0 at scsibus1 targ 1 lun 0: <ATA, Samsung SSD 850, EXM0> SCSI3 0/direct fixed 
naa.500253884012b49d
sd0: 244198MB, 512 bytes/sector, 500118192 sectors, thin
ppb0 at pci0 dev 28 function 0 "Intel 100 Series PCIE" rev 0xf1: msi
pci1 at ppb0 bus 2
rtsx0 at pci1 dev 0 function 0 "Realtek RTS522A Card Reader" rev 0x01: msi
sdmmc0 at rtsx0: 4-bit
ppb1 at pci0 dev 28 function 2 "Intel 100 Series PCIE" rev 0xf1: msi
pci2 at ppb1 bus 4
iwm0 at pci2 dev 0 function 0 "Intel Dual Band Wireless AC 8260" rev 0x3a, msi
pcib0 at pci0 dev 31 function 0 "Intel 100 Series LPC" rev 0x21
"Intel 100 Series PMC" rev 0x21 at pci0 dev 31 function 2 not configured
azalia0 at pci0 dev 31 function 3 "Intel 100 Series HD Audio" rev 0x21: msi
azalia0: codecs: Realtek/0x0293, Intel/0x2809, using Realtek/0x0293
audio0 at azalia0
ichiic0 at pci0 dev 31 function 4 "Intel 100 Series SMBus" rev 0x21: apic 2 int 
16
iic0 at ichiic0
em0 at pci0 dev 31 function 6 "Intel I219-LM" rev 0x21: msi, address 
50:7b:9d:d6:df:00
em0: PHY reset is blocked due to SOL/IDER session.
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5 irq 1 irq 12
pckbd0 at pckbc0 (kbd slot)
wskbd0 at pckbd0: console keyboard
pms0 at pckbc0 (aux slot)
wsmouse0 at pms0 mux 0
wsmouse1 at pms0 mux 0
pms0: Synaptics clickpad, firmware 8.1
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
vmm0 at mainbus0: VMX/EPT
efifb0 at mainbus0
wsdisplay0 at efifb0 mux 1: console (std, vt100 emulation), using wskbd0
wsdisplay0: screen 1-5 added (std, vt100 emulation)
umb0 at uhub0 port 3 configuration 1 interface 12 "Sierra Wireless, Incorporated 
Sierra Wireless EM7455 Qualcomm Snapdragon X7 LTE-A" rev 2.10/0.06 addr 2
umb0: ctrl_len=4096, maxpktlen=2048, cap=0x20
umb0: ctrl-ifno#12: ep-ctrl=2, data-ifno#13: ep-rx=1, ep-tx=1
umb0: -> snd MBIM_OPEN_MSG (tid 1)
umb0: sent MBIM_OPEN_MSG (tid 1)
   0:   01 00 00 00 10 00 00 00 01 00 00 00 00 10 00 00
umb0: vers 1.0
vscsi0 at root
scsibus2 at vscsi0: 256 targets
softraid0 at root
scsibus3 at softraid0: 256 targets
sd1 at scsibus3 targ 1 lun 0: <OPENBSD, SR CRYPTO, 006> SCSI2 0/direct fixed
sd1: 244197MB, 512 bytes/sector, 500116577 sectors
root on sd1a (acef1b0856ff7402.a) swap on sd1b dump on sd1b
iwm0: hw rev 0x200, fw ver 16.242414.0, address 44:85:00:0f:cf:8a
umb0: umb_intr: response available
umb0: got response: len 16
   0:   01 00 00 80 10 00 00 00 01 00 00 00 00 00 00 00
umb0: <- rcv MBIM_OPEN_DONE (tid 1)
umb0: -> qry MBIM_CID_DEVICE_CAPS (tid 2)
umb0: sent MBIM_COMMAND_MSG (tid 2)
   0:   03 00 00 00 30 00 00 00 02 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 01 00 00 00 00 00 00 00 00 00 00 00
umb0: -> qry MBIM_CID_PIN (tid 3)
umb0: sent MBIM_COMMAND_MSG (tid 3)
   0:   03 00 00 00 30 00 00 00 03 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 04 00 00 00 00 00 00 00 00 00 00 00
umb0: -> qry MBIM_CID_REGISTER_STATE (tid 4)
umb0: sent MBIM_COMMAND_MSG (tid 4)
   0:   03 00 00 00 30 00 00 00 04 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 09 00 00 00 00 00 00 00 00 00 00 00
umb0: state going up from 'down' to 'open'
umb0: umb_intr: response available
umb0: stop: reached state DOWN
umb0: umb_intr: response available
umb0: umb_intr: response available
umb0: got response: len 196
   0:   03 00 00 80 c4 00 00 00 02 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 01 00 00 00 00 00 00 00 94 00 00 00
  48:   03 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00
  64:   3c 00 00 00 03 00 00 00 01 00 00 00 08 00 00 00
  80:   00 00 00 00 00 00 00 00 40 00 00 00 1e 00 00 00
  96:   60 00 00 00 28 00 00 00 88 00 00 00 0c 00 00 00
 112:   30 00 31 00 34 00 35 00 38 00 32 00 30 00 30 00
 128:   30 00 31 00 39 00 34 00 37 00 38 00 38 00 00 00
 144:   53 00 57 00 49 00 39 00 58 00 33 00 30 00 43 00
 160:   5f 00 30 00 32 00 2e 00 30 00 38 00 2e 00 30 00
 176:   32 00 2e 00 30 00 30 00 45 00 4d 00 37 00 34 00
 192:   35 00 35 00
umb0: <- rcv MBIM_COMMAND_DONE (tid 2)
umb0: set/qry MBIM_CID_DEVICE_CAPS done
umb0: max sessions 8, supported classes 0x3c
umb0: got response: len 60
   0:   03 00 00 80 3c 00 00 00 03 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 04 00 00 00 00 00 00 00 0c 00 00 00
  48:   03 00 00 00 01 00 00 00 03 00 00 00
umb0: <- rcv MBIM_COMMAND_DONE (tid 3)
umb0: set/qry MBIM_CID_PIN done
umb0: PIN2 state locked (3 attempts left)
umb0: got response: len 96
   0:   03 00 00 80 60 00 00 00 04 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 09 00 00 00 00 00 00 00 30 00 00 00
  48:   00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00
  64:   01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  80:   00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00
umb0: <- rcv MBIM_COMMAND_DONE (tid 4)
umb0: set/qry MBIM_CID_REGISTER_STATE done
umb0: not registered, availclass 0x0, class 0x1, regmode 1
umb0: stop: reached state DOWN
iwm0: device timeout
umb0: -> set MBIM_CID_REGISTER_STATE (tid 5)
umb0: sent MBIM_COMMAND_MSG (tid 5)
   0:   03 00 00 00 40 00 00 00 05 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 09 00 00 00 01 00 00 00 10 00 00 00
  48:   00 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00
umb0: umb_intr: response available
umb0: got response: len 96
   0:   03 00 00 80 60 00 00 00 05 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 09 00 00 00 00 00 00 00 30 00 00 00
  48:   00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00
  64:   01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  80:   00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00
umb0: <- rcv MBIM_COMMAND_DONE (tid 5)
umb0: set/qry MBIM_CID_REGISTER_STATE done
umb0: not registered, availclass 0x0, class 0x1, regmode 1
umb0: init: turning radio on ...
umb0: set radio on
umb0: -> set MBIM_CID_RADIO_STATE (tid 6)
umb0: sent MBIM_COMMAND_MSG (tid 6)
   0:   03 00 00 00 34 00 00 00 06 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 03 00 00 00 01 00 00 00 04 00 00 00
  48:   01 00 00 00
umb0: init: checking SIM state ...
umb0: -> qry MBIM_CID_SUBSCRIBER_READY_STATUS (tid 7)
umb0: sent MBIM_COMMAND_MSG (tid 7)
   0:   03 00 00 00 30 00 00 00 07 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 02 00 00 00 00 00 00 00 00 00 00 00
umb0: umb_intr: response available
umb0: got response: len 56
   0:   03 00 00 80 38 00 00 00 06 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 03 00 00 00 02 00 00 00 08 00 00 00
  48:   01 00 00 00 00 00 00 00
umb0: <- rcv MBIM_COMMAND_DONE (tid 6)
umb0: set/qry MBIM_CID_RADIO_STATE failed: FAILURE
umb0: umb_intr: response available
umb0: got response: len 180
   0:   03 00 00 80 b4 00 00 00 07 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 02 00 00 00 00 00 00 00 84 00 00 00
  48:   01 00 00 00 3c 00 00 00 1e 00 00 00 5c 00 00 00
  64:   28 00 00 00 00 00 00 00 01 00 00 00 24 00 00 00
  80:   18 00 00 00 2b 00 31 00 32 00 30 00 39 00 34 00
  96:   35 00 34 00 39 00 30 00 39 00 37 00 33 00 31 00
 112:   30 00 34 00 31 00 30 00 38 00 38 00 34 00 30 00
 128:   37 00 36 00 31 00 36 00 38 00 00 00 38 00 39 00
 144:   30 00 31 00 34 00 31 00 30 00 34 00 32 00 37 00
 160:   38 00 38 00 34 00 30 00 37 00 36 00 31 00 36 00
 176:   38 00 30 00
umb0: <- rcv MBIM_COMMAND_DONE (tid 7)
umb0: set/qry MBIM_CID_SUBSCRIBER_READY_STATUS done
umb0: SIM initialized
umb0: state going up from 'open' to 'SIM is ready'
umb0: init: attaching ...
umb0: attach packet service
umb0: -> set MBIM_CID_PACKET_SERVICE (tid 8)
umb0: sent MBIM_COMMAND_MSG (tid 8)
   0:   03 00 00 00 34 00 00 00 08 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 0a 00 00 00 01 00 00 00 04 00 00 00
  48:   00 00 00 00
umb0: umb_intr: response available
umb0: got response: len 48
   0:   03 00 00 80 30 00 00 00 08 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 0a 00 00 00 14 00 00 00 00 00 00 00
umb0: <- rcv MBIM_COMMAND_DONE (tid 8)
umb0: set/qry MBIM_CID_PACKET_SERVICE failed: RADIO_POWER_OFF
umb0: state change time out
umb0: init: attaching ...
umb0: attach packet service
umb0: -> set MBIM_CID_PACKET_SERVICE (tid 9)
umb0: sent MBIM_COMMAND_MSG (tid 9)
   0:   03 00 00 00 34 00 00 00 09 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 0a 00 00 00 01 00 00 00 04 00 00 00
  48:   00 00 00 00
umb0: umb_intr: response available
umb0: got response: len 48
   0:   03 00 00 80 30 00 00 00 09 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 0a 00 00 00 14 00 00 00 00 00 00 00
umb0: <- rcv MBIM_COMMAND_DONE (tid 9)
umb0: set/qry MBIM_CID_PACKET_SERVICE failed: RADIO_POWER_OFF
umb0: state change time out
umb0: init: attaching ...
umb0: attach packet service
umb0: -> set MBIM_CID_PACKET_SERVICE (tid 10)
umb0: sent MBIM_COMMAND_MSG (tid 10)
   0:   03 00 00 00 34 00 00 00 0a 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 0a 00 00 00 01 00 00 00 04 00 00 00
  48:   00 00 00 00
umb0: umb_intr: response available
umb0: got response: len 48
   0:   03 00 00 80 30 00 00 00 0a 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 0a 00 00 00 14 00 00 00 00 00 00 00
umb0: <- rcv MBIM_COMMAND_DONE (tid 10)
umb0: set/qry MBIM_CID_PACKET_SERVICE failed: RADIO_POWER_OFF
umb0: state change time out
umb0: init: attaching ...
umb0: attach packet service
umb0: -> set MBIM_CID_PACKET_SERVICE (tid 11)
umb0: sent MBIM_COMMAND_MSG (tid 11)
   0:   03 00 00 00 34 00 00 00 0b 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 0a 00 00 00 01 00 00 00 04 00 00 00
  48:   00 00 00 00
umb0: umb_intr: response available
umb0: got response: len 48
   0:   03 00 00 80 30 00 00 00 0b 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 0a 00 00 00 14 00 00 00 00 00 00 00
umb0: <- rcv MBIM_COMMAND_DONE (tid 11)
umb0: set/qry MBIM_CID_PACKET_SERVICE failed: RADIO_POWER_OFF
umb0: state change time out
umb0: init: attaching ...
umb0: attach packet service
umb0: -> set MBIM_CID_PACKET_SERVICE (tid 12)
umb0: sent MBIM_COMMAND_MSG (tid 12)
   0:   03 00 00 00 34 00 00 00 0c 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 0a 00 00 00 01 00 00 00 04 00 00 00
  48:   00 00 00 00
umb0: umb_intr: response available
umb0: got response: len 48
   0:   03 00 00 80 30 00 00 00 0c 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 0a 00 00 00 14 00 00 00 00 00 00 00
umb0: <- rcv MBIM_COMMAND_DONE (tid 12)
umb0: set/qry MBIM_CID_PACKET_SERVICE failed: RADIO_POWER_OFF
umb0: -> set MBIM_CID_REGISTER_STATE (tid 13)
umb0: sent MBIM_COMMAND_MSG (tid 13)
   0:   03 00 00 00 40 00 00 00 0d 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 09 00 00 00 01 00 00 00 10 00 00 00
  48:   00 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00
umb0: umb_intr: response available
umb0: got response: len 96
   0:   03 00 00 80 60 00 00 00 0d 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 09 00 00 00 00 00 00 00 30 00 00 00
  48:   00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00
  64:   01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  80:   00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00
umb0: <- rcv MBIM_COMMAND_DONE (tid 13)
umb0: set/qry MBIM_CID_REGISTER_STATE done
umb0: not registered, availclass 0x0, class 0x1, regmode 1
umb0: state change time out
umb0: init: attaching ...
umb0: attach packet service
umb0: -> set MBIM_CID_PACKET_SERVICE (tid 14)
umb0: sent MBIM_COMMAND_MSG (tid 14)
   0:   03 00 00 00 34 00 00 00 0e 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 0a 00 00 00 01 00 00 00 04 00 00 00
  48:   00 00 00 00
umb0: umb_intr: response available
umb0: got response: len 48
   0:   03 00 00 80 30 00 00 00 0e 00 00 00 01 00 00 00
  16:   00 00 00 00 a2 89 cc 33 bc bb 8b 4f b6 b0 13 3e
  32:   c2 aa e6 df 0a 00 00 00 14 00 00 00 00 00 00 00
umb0: <- rcv MBIM_COMMAND_DONE (tid 14)
umb0: set/qry MBIM_CID_PACKET_SERVICE failed: RADIO_POWER_OFF