Provide a tagged allocation top pointer.

src/arm64/code-stubs-arm64.cc

Index: src/arm64/code-stubs-arm64.cc
diff --git a/src/arm64/code-stubs-arm64.cc b/src/arm64/code-stubs-arm64.cc
index 24dafac3a76f50be01959a4f542165c8b88f0771..0a77eea89d5c04bd6c4f77890d2a0ec0f848476c 100644
--- a/src/arm64/code-stubs-arm64.cc
+++ b/src/arm64/code-stubs-arm64.cc
@@ -4695,6 +4695,7 @@ void FastNewObjectStub::Generate(MacroAssembler* masm) {
   Label allocate, done_allocate;
   __ Ldrb(x4, FieldMemOperand(x2, Map::kInstanceSizeOffset));
   __ Allocate(x4, x0, x5, x6, &allocate, SIZE_IN_WORDS);
+  __ Sub(x5, x5, Operand(kHeapObjectTag));  // Untag result end.
   __ Bind(&done_allocate);
 
   // Initialize the JSObject fields.
@@ -4842,6 +4843,7 @@ void FastNewRestParameterStub::Generate(MacroAssembler* masm) {
     // Allocate an empty rest parameter array.
     Label allocate, done_allocate;
     __ Allocate(JSArray::kSize, x0, x1, x2, &allocate, NO_ALLOCATION_FLAGS);
+    __ Sub(x1, x1, Operand(kHeapObjectTag));  // Untag result end.
     __ Bind(&done_allocate);
 
     // Setup the rest parameter array in x0.