cgroup: use read lock to guard find_existing_css_set()