[wasm] Do not create TF nodes during verification

test/mjsunit/regress/wasm/regression-654377.js

 // Copyright 2016 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --expose-wasm
 
 load("test/mjsunit/wasm/wasm-constants.js");
 load("test/mjsunit/wasm/wasm-module-builder.js");
 
 (function() {
   var builder = new WasmModuleBuilder();
   builder.addMemory(1, 1, false);
   builder.addFunction("foo", kSig_i_v)
     .addBody([
+              kExprI32Const, 00,
               kExprMemorySize,
-              kExprI32Const, 0x10,
-              kExprGrowMemory,
-              kExprI32Mul,
+              kExprBrIf, 00,
+              kExprMemorySize,
+              kExprBr, 0xe7, 0xd2, 0xf2, 0xff, 0x1d
               ])
               .exportFunc();
-  var module = builder.instantiate();
-  var result = module.exports.foo();
-  assertEquals(1, result);
+  assertThrows(function() { builder.instantiate(); });
 })();