mistranslation: 0.945
semantic: 0.933
device: 0.903
instruction: 0.885
graphic: 0.852
socket: 0.768
network: 0.737
vnc: 0.699
other: 0.584
assembly: 0.540
boot: 0.375
KVM: 0.053

QEMU fails an assertion when hitting a breakpoint that is set on a tlb-missed 2-stage translated AArch64 memory
Description of problem:
After upgrading to QEMU v7.2.0 from v7.1.0, when hitting an instruction breakpoint on a memory address that is translated by 2 stages of translation, and is not already cached in the TLB, QEMU fails the assertion at target/arm/ptw.c:301 (`assert(fi->type != ARMFault_None);`).

I believe this was introduced in f3639a64f602ea5c1436eb9c9b89f42028e3a4a8 (@rth7680), since in that commit the failure check for the return value of `get_phys_addr_lpae()` changed from checking for true (meaning failure) to checking for false (which actually means success).