[turbofan] Remove frame state input from speculative ops.

src/compiler/simplified-lowering.cc

Index: src/compiler/simplified-lowering.cc
diff --git a/src/compiler/simplified-lowering.cc b/src/compiler/simplified-lowering.cc
index 7f5ac97cd612d396f3d229b26081d91d2f594a2a..4f485c705afe4994d7d61ac2aa36c710e3a96afb 100644
--- a/src/compiler/simplified-lowering.cc
+++ b/src/compiler/simplified-lowering.cc
@@ -1033,9 +1033,9 @@ class RepresentationSelector {
   }
 
   void ChangeToInt32OverflowOp(Node* node, const Operator* op) {
-    Node* frame_state = NodeProperties::GetFrameStateInput(node, 0);
     Node* effect = NodeProperties::GetEffectInput(node);
     Node* control = NodeProperties::GetControlInput(node);
+    Node* frame_state = NodeProperties::FindFrameStateBefore(node);
     Node* arith = graph()->NewNode(op, node->InputAt(0), node->InputAt(1));
     Node* overflow = graph()->NewNode(common()->Projection(1), arith);
     control = effect = graph()->NewNode(common()->DeoptimizeIf(), overflow,