oom: add per-zone locking