HTC one E9+ miracast UIBC : connected but can not work

Hi all:
I'm developing a miracast sink device .
My sink device can connect to HTC one E9+ miracast ,video and audio streaming works well.
But while connecting to its UIBC (user input back channel : used for remote control from sink device) ,
it succeeds to connect to tcp port 5100 , but the phone does not have any response to the touch input from sink device.
I've tried sink device with HTC desire 820u , it's UIBC works perfact.
Also I've tried HTC one E9+ with someone car head unit , it's UIBC woks , but not every time (every connection).
So I'm sure it supports UIBC.

Anyone can help ?
Bellow is the HTC one E9+ miracast M3 handshaking log:
//////////////////////////////////////////////////////////////////////////////////////////////////////////////////
// M3 message : src --> sink
01-02 06:16:20.640: I/AmmboxSink(3317): GET_PARAMETER rtsp://localhost/wfd1.0 RTSP/1.0
01-02 06:16:20.640: I/AmmboxSink(3317): content-length: 104
01-02 06:16:20.640: I/AmmboxSink(3317): content-type: text/parameters
01-02 06:16:20.640: I/AmmboxSink(3317): cseq: 2
01-02 06:16:20.640: I/AmmboxSink(3317): date: Tue, 02 Aug 2016 03:11:29 +0000
01-02 06:16:20.640: I/AmmboxSink(3317): server: stagefright/1.2 (Linux;Android 5.0.2)
01-02 06:16:20.640: I/AmmboxSink(3317): wfd_content_protection
01-02 06:16:20.640: I/AmmboxSink(3317): wfd_video_formats
01-02 06:16:20.640: I/AmmboxSink(3317): wfd_audio_codecs
01-02 06:16:20.640: I/AmmboxSink(3317): wfd_client_rtp_ports
01-02 06:16:20.640: I/AmmboxSink(3317): wfd_uibc_capability

//M3 message : sink --> src
01-02 06:16:20.640: I/AmmboxSink(3317): RTSP/1.0 200 OK
01-02 06:16:20.640: I/AmmboxSink(3317): Date: Sat, 01 Jan 2000 22:16:20 +0000
01-02 06:16:20.640: I/AmmboxSink(3317): User-Agent: stagefright/1.1 (Linux;Android 4.1)
01-02 06:16:20.640: I/AmmboxSink(3317): CSeq: 2
01-02 06:16:20.640: I/AmmboxSink(3317): Content-Type: text/parameters
01-02 06:16:20.640: I/AmmboxSink(3317): Content-Length: 368
01-02 06:16:20.640: I/AmmboxSink(3317):
01-02 06:16:20.640: I/AmmboxSink(3317): wfd_video_formats: 00 00 00 00 00000060 00000000 000000000 00 0000 0000 11 none none, 01 02 0001DEFF 157C7FFF 00000FFF 00 0000 0000 11 none none
01-02 06:16:20.640: I/AmmboxSink(3317): wfd_audio_codecs: LPCM 00000003 00, AAC 0000000F 00
01-02 06:16:20.640: I/AmmboxSink(3317): wfd_uibc_capability: input_category_list=GENERIC;generic_cap_list=Singl eTouch;hidc_cap_list=none;port=none
01-02 06:16:20.640: I/AmmboxSink(3317): wfd_client_rtp_ports: RTP/AVP/UDP;unicast 15550 0 mode=play
01-02 06:16:20.640: I/AmmboxSink(3317): '

//M4 message: src --> sink
01-02 06:16:20.800: I/AmmboxSink(3317): received:'SET_PARAMETER rtsp://localhost/wfd1.0 RTSP/1.0
01-02 06:16:20.800: I/AmmboxSink(3317): content-length: 381
01-02 06:16:20.800: I/AmmboxSink(3317): content-type: text/parameters
01-02 06:16:20.800: I/AmmboxSink(3317): cseq: 3
01-02 06:16:20.800: I/AmmboxSink(3317): date: Tue, 02 Aug 2016 03:11:29 +0000
01-02 06:16:20.800: I/AmmboxSink(3317): server: stagefright/1.2 (Linux;Android 5.0.2)
01-02 06:16:20.800: I/AmmboxSink(3317): wfd_video_formats: 00 00 01 01 00000020 00000000 00000000 00 0000 0000 00 none none
01-02 06:16:20.800: I/AmmboxSink(3317): wfd_audio_codecs: AAC 00000001 00
01-02 06:16:20.800: I/AmmboxSink(3317): wfd_uibc_capability: input_category_list=GENERIC;generic_cap_list=Singl eTouch;hidc_cap_list=none;port=5100
01-02 06:16:20.800: I/AmmboxSink(3317): wfd_uibc_setting: enable
01-02 06:16:20.800: I/AmmboxSink(3317): wfd_presentation_URL: rtsp://192.168.49.1/wfd1.0/streamid=0 none
01-02 06:16:20.800: I/AmmboxSink(3317): wfd_client_rtp_ports: RTP/AVP/UDP;unicast 15550 0 mode=play

from xda-developers http://ift.tt/2aLNi7a
via IFTTT