So the fix for our problems is:

 a) in fs/namei.c replace d_unhash() with a safe version.
 b) in fs/nfs/dir.c replace d_drop(dentry) in beginning of nfs_unlink()
 with list_del_init(&dentry->d_hash);