found 917206 4.9.130-2 thanks tl;dr: This is a regression introduced in Debian 9.6 (linux/4.9.130-2); it is caused by [1] and fixed by [2]. Please fix :)
I'm taking the liberty to hijack this bug because I'm experiencing the same issue [3] when powering off a usb3 hdd. The oops is easy to reproduce; I've tested the following versions of linux-image-4.9.0-8-amd64: - 4.9.110-3+deb9u6: works - 4.9.130-2 (current stretch): affected - 4.9.135-1 (stretch-proposed-updates): affected - 4.9.130-2 + manually applying [2]: works Thanks, Christoph [1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/drivers/usb/host?h=linux-4.9.y&id=2679c2231bc3fb260f74e1faf7d6810427b1fc6e [2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/drivers/usb/host?h=linux-4.9.y&id=52f305530ab6e5915b5e5ee0cb9525df42f2b691 [3] kernel: usb 7-2: USB disconnect, device number 4 kernel: BUG: unable to handle kernel NULL pointer dereference at 000000000000001c kernel: IP: [<ffffffffc022c373>] xhci_hub_control+0x1a13/0x1c50 [xhci_hcd] kernel: PGD 0 kernel: kernel: Oops: 0000 [#1] SMP kernel: Modules linked in: cpufreq_powersave cpufreq_userspace cpufreq_conservative nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6_tables nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iptable_filter edac_mce_amd edac_core kvm_amd kernel: glue_helper lrw gf128mul ablk_helper cryptd ahci libahci xhci_pci xhci_hcd i2c_piix4 ohci_hcd libata ehci_pci ehci_hcd scsi_mod usbcore usb_common r8169 mii kernel: CPU: 0 PID: 138 Comm: kworker/0:3 Not tainted 4.9.0-8-amd64 #1 Debian 4.9.130-2 kernel: Hardware name: Gigabyte Technology Co., Ltd. To be filled by O.E.M./F2A88XM-HD3, BIOS F7 07/09/2014 kernel: Workqueue: usb_hub_wq hub_event [usbcore] kernel: task: ffff8e3435468100 task.stack: ffffae9040928000 kernel: RIP: 0010:[<ffffffffc022c373>] [<ffffffffc022c373>] xhci_hub_control+0x1a13/0x1c50 [xhci_hcd] kernel: RSP: 0018:ffffae904092ba90 EFLAGS: 00010086 kernel: RAX: ffff8e3435552000 RBX: ffff8e34354dc000 RCX: 0000000000000000 kernel: RDX: 0000000000000060 RSI: 0000000000001261 RDI: ffff8e34354ba284 kernel: RBP: 00000000ffffffed R08: 0000000000000008 R09: 0000000000000001 kernel: R10: 0000000000000001 R11: 0000000000000212 R12: 0000000000000001 kernel: R13: ffff8e34354ba000 R14: ffff8e34354ba284 R15: 0000000000000002 kernel: FS: 0000000000000000(0000) GS:ffff8e343ec00000(0000) knlGS:0000000000000000 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kernel: CR2: 000000000000001c CR3: 00000001365a4000 CR4: 00000000000406f0 kernel: Stack: kernel: 000000ff90625600 c6542f7200000005 0000000000000002 ffff8e3400000000 kernel: 0000000000000005 0000000000000000 ffff8e34354ba238 ffffffff907e0000 kernel: ffff8e343ac00302 000000004092bba0 ffff8e3435d28e40 ffff8e3435610000 kernel: Call Trace: kernel: [<ffffffff907e0000>] ? mempolicy_nodemask_intersects+0x10/0x70 kernel: [<ffffffff90854246>] ? ep_poll_callback+0x106/0x230 kernel: [<ffffffffc00ce86a>] ? usb_hcd_submit_urb+0x2aa/0xaf0 [usbcore] kernel: [<ffffffff906e7664>] ? lock_timer_base+0x74/0x90 kernel: [<ffffffff906e74ea>] ? __internal_add_timer+0x1a/0x50 kernel: [<ffffffff906e9e70>] ? add_timer+0x110/0x270 kernel: [<ffffffffc00d0aed>] ? usb_start_wait_urb+0x6d/0x170 [usbcore] kernel: [<ffffffffc00d5572>] ? usb_release_interface_cache+0x32/0x50 [usbcore] kernel: [<ffffffffc00d0ccd>] ? usb_control_msg+0xdd/0x140 [usbcore] kernel: [<ffffffff90a7e340>] ? device_release+0x30/0x90 kernel: [<ffffffffc00c3c54>] ? set_port_feature+0x44/0x50 [usbcore] kernel: [<ffffffffc00c5579>] ? hub_port_disable+0xc9/0x140 [usbcore] kernel: [<ffffffffc00ca4eb>] ? hub_event+0xd8b/0x15c0 [usbcore] kernel: [<ffffffff90c190a4>] ? __switch_to_asm+0x34/0x70 kernel: [<ffffffff90c190b0>] ? __switch_to_asm+0x40/0x70 kernel: [<ffffffff9069421a>] ? process_one_work+0x18a/0x420 kernel: [<ffffffff906944fd>] ? worker_thread+0x4d/0x490 kernel: [<ffffffff906944b0>] ? process_one_work+0x420/0x420 kernel: [<ffffffff9069a569>] ? kthread+0xd9/0xf0 kernel: [<ffffffff9069a490>] ? kthread_park+0x60/0x60 kernel: [<ffffffff90c19124>] ? ret_from_fork+0x44/0x70 kernel: Code: e9 49 f8 ff ff 45 31 e4 eb 11 49 83 c4 01 49 81 fc 00 01 00 00 0f 84 c3 f2 ff ff 4b 8b 84 e5 08 04 00 00 48 85 c0 74 e2 48 8b 08 <83> 79 1c 04 40 0f 96 c6 83 bb a0 00 00 00 3f 0f 9f c1 40 38 ce kernel: RIP [<ffffffffc022c373>] xhci_hub_control+0x1a13/0x1c50 [xhci_hcd] kernel: RSP <ffffae904092ba90> kernel: CR2: 000000000000001c kernel: ---[ end trace 8be8c1ab53920c10 ]---

