Fix RV64 badaddr value on instruction faults with large addresses

We were relying on ALU passthrough for this, but failed to override the
ALU dw argument, so bits above 31 could be discarded.