If -next doesn't help, it might help to see debugging messages from mhi. It's very weird that it didn't time out as Takashi noted (the timeout_ms config). Adding mhi.dyndbg=+p to the kernel commandline will do the job.