netfs: Fix missing locking around retry adding new subreqs (CVE-2026-64068) | HOL Guard CVE