riscv: tlb: Fixup stale "VPN->PPN" tlb entry

Using the below test script (made by XuHaijiang) could reproduce the problem:
args=("system-modprobe.slice" \
       "system-weston.slice" \
       "graphical.target" \
       "multi-user.target" \
       "getty.target" \
       "nss-lookup.target" \
       "time-sync.target" \
       "time-set.target" \
       "timers.target" \
       "systemd-tmpfiles-clean.timer" \
       "usb-gadget.target" \
       "systemd-rfkill.socket" \
       "android-tools-adbd.service" \
       "aon_wdt.service" \
       "getty@tty1.service" \
       "npu-ax3386.service" \
       "pvrsrvkm.service" \
       "serial-getty@ttyS0.serviceg" \
       "syslog-ng@default.service" \
       "systemd-random-seed.service" \
       "vc8000d.service" \
       "vc8000e.service" \
       "xtensa-dsp.service" \
       "sshdgenkeys.service" \
       "systemd-random-seed.service" \
       "session-c2.scope" \
       "system-getty.slice" \
       "system-serial\\x2dgetty.slice" \
       "system-syslog\\x2dng.slice" \
       "systemd-logind.service" \
       "user@0.service" \
       "vi-kernel.service" \
       "user-runtime-dir@0.service" \
       "run-user-0.mount" \
       "user-0.slice" \
       "dbus.service" \
       "systemd-user-sessions.service" \
       "basic.target" \
       "network.target" \
       "paths.target" \
       "systemd-ask-password-console.path" \
       "systemd-ask-password-wall.path" \
       "remote-fs.target" \
       "slices.target" \
       "user.slice" \
       "sockets.target" \
       "dbus.socket" \
       "sshd.socket" \
       "sysinit.target" \
       "systemd-backlight@backlight:pwm-backlight@0.service" \
       "systemd-backlight@backlight:pwm-backlight@1.service" \
       "systemd-resolved.service" \
       "systemd-timesyncd.service" \
       "systemd-update-utmp.service" \
       "system-systemd\\x2dbacklight.slice" \
       "systemd-networkd.service" \
       "systemd-update-utmp.service" \
       "systemd-tmpfiles-setup.service" \
       "local-fs.target" \
       "media-rfs-ro.mount" \
       "media-rfs-rw.mount" \
       "tmp.mount" \
       "var-volatile.mount" \
       "local-fs-pre.target" \
       "systemd-remount-fs.service" \
       "systemd-sysctl.service" \
       "systemd-tmpfiles-setup-dev.service" \
       "" \
       )
for arg in ${args[@]}
do
    echo $arg
    systemctl status $arg
done

Here is the bug log:
[   40.746891] systemctl[533]: unhandled signal 11 code 0x1 at 0x0000000000000002 in libsystemd-shared-246.so[3ff17ea000+1c8000]
[   40.759037] CPU: 1 PID: 533 Comm: systemctl Kdump: loaded Not tainted 5.10.113-00018-gedc480f11598 #77
[   40.769735] epc: 0000003ff191b37c ra : 0000003ff191bfd0 sp : 0000003fffdddee0
[   40.769741]  gp : 000000000003c800 tp : 0000003ff14ec6e0 t0 : 0000000000001000
[   40.769749]  t1 : 0000003ff183b55c t2 : 0000000000000000 s0 : 000000000003d2a0
[   40.795405]  s1 : 0000000000000005 a0 : 000000000003d2a0 a1 : 0000000000000000
[   40.795409]  a2 : 0000003fffdddf80 a3 : 0000000000000000 a4 : 8ae45fc8a3729500
[   40.795419]  a5 : 8ae45fc8a3729500 a6 : 0000003ff19cb010 a7 : 0000000000000049
[   40.821213]  s2 : 0000000000000002 s3 : 0000000000000000 s4 : 0000003fffdde1d0
[   40.821220]  s5 : 000000000003de70 s6 : 0000003ff1967290 s7 : 0000003ff1967288
[   40.821223]  s8 : 0000003fffdde1d0 s9 : 0000003fffdde1c0 s10: 00000000001026b0
[   40.821227]  s11: 0000000000037000 t3 : 0000003ff191bf90 t4 : 0000000000000017
[   40.821229]  t5 : 00134335fbad5f80 t6 : 000000000b22ef77
[   40.821233] status: 8000000201804020 badaddr: 0000000000000002 cause: 000000000000000d
[   41.366904] systemctl[545]: unhandled signal 11 code 0x1 at 0x0000000000000000 in systemctl[10000+2a000]
[   41.377010] CPU: 3 PID: 545 Comm: systemctl Kdump: loaded Not tainted 5.10.113-00018-gedc480f11598 #77
[   41.387701] epc: 0000000000000000 ra : 0000000000000000 sp : 0000003fffff0010
[   41.387706]  gp : 000000000003c800 tp : 0000003fb81f26e0 t0 : 0000000000001000
[   41.387709]  t1 : 0000003fb8547f4c t2 : 0000000000000000 s0 : 0000000000000000
[   41.387712]  s1 : 0000000000000005 a0 : 0000000000000001 a1 : 0000000000000001
[   41.387715]  a2 : 0000003ffffeff70 a3 : 0000000000000000 a4 : 84928508a3149400
[   41.387718]  a5 : 84928508a3149400 a6 : 0000003fb86d1010 a7 : 0000000000000049
[   41.387721]  s2 : 0000003fffff0288 s3 : 0000000000000000 s4 : 0000003fffff01c0
[   41.387730]  s5 : 000000000003da40 s6 : 0000003fb866d290 s7 : 0000003fb866d288
[   41.454893]  s8 : 0000003fffff01c0 s9 : 0000003fffff01b0 s10: 0000000000102160
[   41.454897]  s11: 0000000000037000 t3 : 0000003fb8468650 t4 : 0000000000000017
[   41.454904]  t5 : 0007f00a7bb6d560 t6 : 000000000b3f5117
[   41.474746] status: 8000000201804020 badaddr: 0000000000000000 cause: 000000000000000c
[  169.327169] systemctl[789]: unhandled signal 11 code 0x1 at 0x0000000000000002 in libsystemd-shared-246.so[3ff17f7000+1c8000]
[  169.339596] CPU: 2 PID: 789 Comm: systemctl Kdump: loaded Not tainted 5.10.113-00018-gedc480f11598 #77
[  169.350276] epc: 0000003ff19205c6 ra : 0000003ff192a4b4 sp : 0000003fffbc4f50
[  169.350281]  gp : 000000000003c800 tp : 0000003ff14f96e0 t0 : fffffffffffff000
[  169.350284]  t1 : 0000003ff184ac6c t2 : 0000000000000000 s0 : 000000000003d2a0
[  169.350287]  s1 : 0000003fffbc4fc0 a0 : 000000000003d2a0 a1 : 0000000000000000
[  169.350290]  a2 : 0000003fffbc5f90 a3 : 0000000000001000 a4 : 0000003fffbc5fc0
[  169.350294]  a5 : 0000000000000000 a6 : 0000003ff19d8010 a7 : 0000000000000049
[  169.350297]  s2 : fffffffffffff000 s3 : 0000000000000002 s4 : 0000003fffbc61c0
[  169.350301]  s5 : 000000000b93ae5e s6 : 000000000000006c s7 : 0000000000000002
[  169.350304]  s8 : 0000003fffbc61c0 s9 : 0000003fffbc61b0 s10: 00000000000fc160
[  169.350313]  s11: 0000000000037000 t3 : 0000003ff1920590 t4 : 0000000000000017
[  169.436230]  t5 : 0006a05903574980 t6 : 000000002220ad77
[  169.436234] status: 8000000201804020 badaddr: 0000000000000002 cause: 000000000000000d
[  172.110861] systemctl[850]: unhandled signal 11 code 0x1 at 0x0000000000000000 in systemctl[10000+2a000]
[  172.121366] CPU: 1 PID: 850 Comm: systemctl Kdump: loaded Not tainted 5.10.113-00018-gedc480f11598 #77
[  172.132053] epc: 0000000000000000 ra : 0000000000000000 sp : 0000003fff9bc010
[  172.132057]  gp : 000000000003c800 tp : 0000003fd5dad6e0 t0 : 0000000000001000
[  172.132061]  t1 : 0000003fd6102f4c t2 : 0000000000000000 s0 : 0000000000000000
[  172.132064]  s1 : 0000000000000005 a0 : 0000000000000001 a1 : 0000000000000001
[  172.132067]  a2 : 0000003fff9bbf70 a3 : 0000000000000000 a4 : 3a8665140c7f5100
[  172.132070]  a5 : 3a8665140c7f5100 a6 : 0000003fd628c010 a7 : 0000000000000049
[  172.132073]  s2 : 0000003fff9bc288 s3 : 0000000000000000 s4 : 0000003fff9bc1c0
[  172.132076]  s5 : 000000000003da90 s6 : 0000003fd6228290 s7 : 0000003fd6228288
[  172.132079]  s8 : 0000003fff9bc1c0 s9 : 0000003fff9bc1b0 s10: 00000000000fc2e0
[  172.132082]  s11: 0000000000037000 t3 : 0000003fd6023650 t4 : 0000000000000017
[  172.132091]  t5 : 00004eea8381d420 t6 : 0000000022a04d57
[  172.224725] status: 8000000201804020 badaddr: 0000000000000000 cause: 000000000000000c
[  185.640447] systemctl[980]: unhandled signal 11 code 0x1 at 0x0000000000000002 in libsystemd-shared-246.so[3fd1de5000+1c8000]
[  185.652509] CPU: 3 PID: 980 Comm: systemctl Kdump: loaded Not tainted 5.10.113-00018-gedc480f11598 #77
[  185.663166] epc: 0000003fd1f1637c ra : 0000003fd1f16fd0 sp : 0000003fffefbed0
[  185.671597]  gp : 000000000003c800 tp : 0000003fd1ae76e0 t0 : 0000000000001000
[  185.680265]  t1 : 0000003fd1e3655c t2 : 0000000000000000 s0 : 000000000003d2a0
[  185.688877]  s1 : 0000000000000005 a0 : 000000000003d2a0 a1 : 0000000000000000
[  185.697376]  a2 : 0000003fffefbf70 a3 : 0000000000000000 a4 : df625c3994aa0200
[  185.697381]  a5 : df625c3994aa0200 a6 : 0000003fd1fc6010 a7 : 0000000000000049
[  185.697392]  s2 : 0000000000000002 s3 : 0000000000000000 s4 : 0000003fffefc1c0
[  185.697398]  s5 : 000000000003da40 s6 : 0000003fd1f62290 s7 : 0000003fd1f62288
[  185.731727]  s8 : 0000003fffefc1c0 s9 : 0000003fffefc1b0 s10: 0000000000104740
[  185.731730]  s11: 0000000000037000 t3 : 0000003fd1f16f90 t4 : 0000000000000017
[  185.731738]  t5 : 00100b3c84503fe0 t6 : 00000000250b9097
[  185.731743] status: 8000000201804020 badaddr: 0000000000000002 cause: 000000000000000d
[  187.084973] systemctl[1012]: unhandled signal 11 code 0x1 at 0x0000000000000002 in libsystemd-shared-246.so[3fed4d8000+1c8000]
[  187.096698] CPU: 3 PID: 1012 Comm: systemctl Kdump: loaded Not tainted 5.10.113-00018-gedc480f11598 #77
[  187.107371] epc: 0000003fed6034ac ra : 0000003fed60726c sp : 0000003ffffcd960
[  187.107375]  gp : 000000000003c800 tp : 0000003fed1da6e0 t0 : 0000000000000030
[  187.107378]  t1 : 0000003fed52990c t2 : 0000000000000000 s0 : 0000000000000002
[  187.107382]  s1 : 000000000003cbb0 a0 : 000000000003d2a0 a1 : 0000000000000000
[  187.107385]  a2 : 0000000000000000 a3 : 0000000000000005 a4 : 0000000000000000
[  187.107388]  a5 : 0000000000000007 a6 : 0000000000000004 a7 : 0000000000000039
[  187.107391]  s2 : 0000000000000003 s3 : 0000003ffffcdbf8 s4 : 000000000003c000
[  187.107393]  s5 : 0000000000032000 s6 : 00000000000fcda0 s7 : 0000000000036000
[  187.107396]  s8 : 0000000000038000 s9 : 0000000000036100 s10: 00000000000fc940
[  187.107405]  s11: 0000000000000000 t3 : 0000003fed6034a0 t4 : 0000000000042b20
[  187.193328]  t5 : 0000000000000010 t6 : 000000000003fb08
[  187.200406] status: 8000000201804020 badaddr: 0000000000000002 cause: 000000000000000d
[  188.098645] systemctl[1032]: unhandled signal 11 code 0x1 at 0x00000000000000b8 in libc-2.31.so[3fc64b6000+11a000]
[  188.110293] CPU: 2 PID: 1032 Comm: systemctl Kdump: loaded Not tainted 5.10.113-00018-gedc480f11598 #77
[  188.120755] epc: 0000003fc6540daa ra : 0000003fc6700948 sp : 0000003fffd6ee50
[  188.120759]  gp : 000000000003c800 tp : 0000003fc63016e0 t0 : 0000000000001000
[  188.120762]  t1 : 0000003fc66525dc t2 : 0000000000000000 s0 : 000000000003bd98
[  188.120815]  s1 : 0000003fffd6ee78 a0 : 0000000000000001 a1 : 0000003fffd6ee78
[  188.120821]  a2 : 0000003fffd6ef70 a3 : 0000000000000000 a4 : 6f5909f45dddfa00
[  188.120825]  a5 : 0000000000000000 a6 : 0000003fc67e0010 a7 : 0000000000000049
[  188.120828]  s2 : 000000000003bd98 s3 : 0000000000000000 s4 : 000000000003d2a0
[  188.120831]  s5 : 000000000003da40 s6 : 0000003fc677c290 s7 : 0000003fc677c288
[  188.120833]  s8 : 0000003fffd6f1c0 s9 : 0000003fffd6f1b0 s10: 00000000000fc1c0
[  188.120836]  s11: 0000000000037000 t3 : 0000003fc6540da0 t4 : 0000000000000017
[  188.120838]  t5 : 001da23d8475b9a0 t6 : 00000000257bfdd7
[  188.120845] status: 8000000201804020 badaddr: 00000000000000b8 cause: 000000000000000d

Signed-off-by: Guo Ren <guoren@linux.alibaba.com>