Previously we jal to panic which never cleared the tlb fault, so if on the course of shutdown (like a doshutdownhooks() callback) missed K2, it would panic again. Fix by setting EPC to panic() and eret.