The spec says:

Load and store effective addresses, which are 64 bits, must have bits 63–39
all equal to bit 38, or else a page-fault exception will occur.

The code says:

  // check that all bits in the address >= 39 are equal
  if (!((&lsu_ctrl.vaddr[63:39]) == 1'b1 || (|lsu_ctrl.vaddr[63:39]) == 1'b0)) ...

So then the 39 in the code should be 38?

Jan