[turbofan] Fix various bailout points for AstGraphBuilder.

test/mjsunit/compiler/deopt-accessors5.js

 // Copyright 2016 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --allow-natives-syntax --harmony-tailcalls
 
 "use strict";
 
-function f(o) {
-  return o.x();
+function f(v) {
+  %DeoptimizeFunction(test);
+  return 153;
 }
-try { f({ x: 1 }); } catch(e) {}
-try { f({ x: 1 }); } catch(e) {}
-%OptimizeFunctionOnNextCall(f);
-try { f({ x: 1 }); } catch(e) {}
+
+function test() {
+  var o = {};
+  o.__defineSetter__('q', f);
+  assertEquals(1, o.q = 1);
+}
+
+test();
+test();
+%OptimizeFunctionOnNextCall(test);
+test();