aio: fix io_destroy(2) vs. lookup_ioctx() race