Use physical addresses internally in futex, and fix a context switching data race

This MR consists of two commits cherry-picked from io_uring, which makes sure that futex cannot wake up context in other address spaces, and that context::switch keeps context locks until the assembly, which (partially) fixes a data race..