Check rings before destroying the control pool, so that you get an assertion when a ring points into space that has been unmapped, instead of a crash.