I had a similar effect for kernel linux-image-4.8.0-0.bpo.2-amd64-unsigned (even though a reset on the front panel was sufficient to reboot). Some say this problem has been introduced by memory cgroups. Does this ring a bell? Are you using dockers or LXCs with cgroup_enable=memory ? Regards Harri