this happen with eci adsul usermode driver. pppd crash with this oops on console.
The field dev may be reseted so the the line 321 of usb.c ("dev->bus->bandwidth_allocated += bustime;" in fuction usb_claim_bandwidth) rise the oops. But I don't really see where the dev field may be reseted so I guess the crash is due to a race condition on the urb sent int endpoint as the uhci_submit_urb proc release a spinlock just before.
oops.decoded.uhci
Description: Binary data