cgroup: protect modifications to cgroup_idr with cgroup_mutex