USB: fix concurrent buffer access in the hub driver