[turbofan] Use unreliable LOAD_IC feedback for Array.prototype.push.

src/compiler/js-call-reducer.cc

Index: src/compiler/js-call-reducer.cc
diff --git a/src/compiler/js-call-reducer.cc b/src/compiler/js-call-reducer.cc
index cd0ba00790bb0ffc23258a9a975cb85249fcca91..3418b5dd22e6b8a3eb48cdffcdde277b23fd75de 100644
--- a/src/compiler/js-call-reducer.cc
+++ b/src/compiler/js-call-reducer.cc
@@ -335,7 +335,9 @@ Reduction JSCallReducer::ReduceObjectPrototypeGetProto(Node* node) {
 
   // Try to determine the {receiver} map.
   ZoneHandleSet<Map> receiver_maps;
-  if (NodeProperties::InferReceiverMaps(receiver, effect, &receiver_maps)) {
+  NodeProperties::InferReceiverMapsResult result =
+      NodeProperties::InferReceiverMaps(receiver, effect, &receiver_maps);
+  if (result == NodeProperties::kReliableReceiverMaps) {
     Handle<Map> candidate_map(
         receiver_maps[0]->GetPrototypeChainRootMap(isolate()));
     Handle<Object> candidate_prototype(candidate_map->prototype(), isolate());