ring-buffer: add locks around rb_per_cpu_empty