#5932 reported a segfault. After replaying, it is an infinite loop in Order.Repair in a formation controller.
The trouble is that the controller is out of the world, & empty. The former would work because we have explicit checks, though it's unsafe (see another diff). The latter is buggy.
The bug is that the formation controller has already been destroyed, but by bad luck it had a timer firing on that turn, and that can still go through since the component hasn't been deleted yet. See D2923 for a similar issue.
This fixes that by resetting to idle, which resets timers and prevents this from happening.