add a missing lock around allocGroup()