On Thu,  8 Oct 2026 18:25:20 +0800, Henry Tseng wrote:
> > Does it help to blacklist "uas" driver before connecting the whole
> > tree? My guess at this point: probably not, it's not a streams bug.
> >   
> 
> No, the host still dies.

> Deconfiguring 2-1.3 completes fine:
> 
>   [   87.929570] xhci_hcd 0000:0c:00.3: Cancel URB 0000000064a1e51d, dev 1.3, ep 0x83, starting at offset 0xfff49000
>   [   87.929675] xhci_hcd 0000:0c:00.3: Stopped on Transfer TRB for slot 4 ep 6
>   [   87.929756] xhci_hcd 0000:0c:00.3: Successful Set TR Deq Ptr cmd, deq = @fff49010
>   [   87.930564] xhci_hcd 0000:0c:00.3: drop ep 0x83, slot id 4, new drop flags = 0x80, new add flags = 0x0
>   [   87.937756] xhci_hcd 0000:0c:00.3: Successful Endpoint Configure command
> 
> The host still dies on disconnection, but the stuck command is now the
> configure endpoint dropping 0x83 of the 2-1.4 hub (slot 6):
> 
>   [  164.793408] usb 2-1: USB disconnect, device number 2
>   [  164.793419] usb 2-1.3: USB disconnect, device number 3
>   ...
>   [  164.803390] usb 2-1.4: USB disconnect, device number 4
>   ...
>   [  164.834173] xhci_hcd 0000:0c:00.3: Cancel URB 000000009ac4b95a, dev 1.4, ep 0x83, starting at offset 0xfff15010
>   [  164.834219] xhci_hcd 0000:0c:00.3: Stopped on Transfer TRB for slot 6 ep 6
>   [  164.834819] xhci_hcd 0000:0c:00.3: drop ep 0x83, slot id 6, new drop flags = 0x80, new add flags = 0x0
>   [  170.058142] xhci_hcd 0000:0c:00.3: Command timeout, USBSTS: 0x00000010 PCD
>   [  185.909602] xhci_hcd 0000:0c:00.3: Abort failed to stop command ring: -110
>   [  185.921446] xhci_hcd 0000:0c:00.3: xHCI host controller not responding, assume dead

But 2-1.4.4 deconfigured successfully before 2-1.4 failed?
Looks like there is something special about those hubs...

The kernel doesn't seem to be doing anything wrong, just stops
these endpoints (which don't even seem to be doing much) and
tries to disable them. I'm only unsure why 2-1.3 seems not to
be suspended despite having no children?

Set TR Deq is omitted in the failing case above, but this isn't
supposed to matter and kernels before 7.3 didn't omit it.

One thing coming to my mind is that the HW might expect the
"deconfigure" flag to be set in the Configure Endpoint command
under such circumstances. If you don't mind spending a few minutes
more, please try the attached patch, and also before unplugging,

  echo 0 > /sys/bus/usb/devices/1-1/bConfigurationValue
  echo 2-1.3:1.0 >/sys/bus/usb/drivers/hub/unbind

But it's starting to look like your patch may be the only option.
It's not out of spec and I've tested it on some HW today, none of
it had any issues with disabling slots with enabled endpoints.

This only works for disconnection from the root hub. Do you have
any external (ideally at least USB 3.1 10gbps) hub to check if HC
still hangs when you disconnect the same device from a hub?

Maybe it helps to re-connect the device before abort begins?
This worked with Renesas :)

Regards,
Michal