Give schemes a dangling address for empty slices, fixing UB in userspace

This allows schemes to avoid checking the length against zero before constructing a slice from pointer+len that the kernel gave. Additionally, the address is now non-canonical on x86, meaning that userspace will fail instead of continuing with UB, if they would ever forget to check the length.