This problem was identified by Olaf Kirch:

In xprt_request_init(), the XID allocation needs to be protected by a
global spinlock.