Reconfigure on the right holder, which might be a hidden object.

src/objects.cc

Index: src/objects.cc
diff --git a/src/objects.cc b/src/objects.cc
index 180255f4fd39cca153b7323c0d1c1f990224322e..86f0900728b6ef90365183b9f1b5dfc6f875599b 100644
--- a/src/objects.cc
+++ b/src/objects.cc
@@ -4180,9 +4180,11 @@ MaybeHandle<Object> JSObject::ReconfigureAsDataProperty(
         }
 
         if (it->IsElement()) {
-          SetElementCallback(object, it->index(), new_data, attributes);
+          SetElementCallback(it->GetHolder<JSObject>(), it->index(), new_data,
+                             attributes);
         } else {
-          SetPropertyCallback(object, it->name(), new_data, attributes);
+          SetPropertyCallback(it->GetHolder<JSObject>(), it->name(), new_data,
+                              attributes);
         }
         if (is_observed) {
           RETURN_ON_EXCEPTION(