arm64: avoid double ISB on kernel entry