Fix Object.prototype.toString.call(proxy)

src/arm64/macro-assembler-arm64-inl.h

Index: src/arm64/macro-assembler-arm64-inl.h
diff --git a/src/arm64/macro-assembler-arm64-inl.h b/src/arm64/macro-assembler-arm64-inl.h
index 9b4abe5514695962d3f28e899942e42edc42aa47..0855a20c6cb05c01bb4646b3cccafbfc353d3e88 100644
--- a/src/arm64/macro-assembler-arm64-inl.h
+++ b/src/arm64/macro-assembler-arm64-inl.h
@@ -1449,7 +1449,7 @@ void MacroAssembler::IsInstanceJSObjectType(Register map,
   Ldrb(scratch, FieldMemOperand(map, Map::kInstanceTypeOffset));
   // If cmp result is lt, the following ccmp will clear all flags.
   // Z == 0, N == V implies gt condition.
-  Cmp(scratch, FIRST_NONCALLABLE_SPEC_OBJECT_TYPE);
+  Cmp(scratch, FIRST_JS_RECEIVER_TYPE);
   Ccmp(scratch, LAST_NONCALLABLE_SPEC_OBJECT_TYPE, NoFlag, ge);
 
   // If we didn't get a valid label object just fall through and leave the