[turbofan] Fix deoptimization from array literal spread.

test/mjsunit/regress/regress-deopt-in-array-literal-spread.js

Index: test/mjsunit/regress/regress-deopt-in-array-literal-spread.js
diff --git a/test/mjsunit/compiler/eager-deopt-simple.js b/test/mjsunit/regress/regress-deopt-in-array-literal-spread.js
similarity index 56%
copy from test/mjsunit/compiler/eager-deopt-simple.js
copy to test/mjsunit/regress/regress-deopt-in-array-literal-spread.js
index 067400cfc629bdd28b58540f45bcc9dc1c36ecbb..8bebbe27f5824f96064cc7f379bc599824328b81 100644
--- a/test/mjsunit/compiler/eager-deopt-simple.js
+++ b/test/mjsunit/regress/regress-deopt-in-array-literal-spread.js
@@ -4,15 +4,9 @@
 
 // Flags: --allow-natives-syntax
 
-function g(a, b, c) {
-  return a + b + c;
-}
+function f(a,b,c,d) { return [a, ...(%DeoptimizeNow(), [b,c]), d]; }
 
-function f() {
-  return g(1, (%_DeoptimizeNow(), 2), 3);
-}
-
-f();
-f();
+assertEquals([1,2,3,4], f(1,2,3,4));
+assertEquals([1,2,3,4], f(1,2,3,4));
 %OptimizeFunctionOnNextCall(f);
-assertEquals(6, f());
+assertEquals([1,2,3,4], f(1,2,3,4));