vector-based ICs did not update type feedback counts correctly.

src/objects.h

Index: src/objects.h
diff --git a/src/objects.h b/src/objects.h
index 1faae8613b4d2e61e57a47bcef8c9f0f7df1b8f0..e171edb5dee3b95c53b9d1a527cb3ae694f3503b 100644
--- a/src/objects.h
+++ b/src/objects.h
@@ -8090,14 +8090,15 @@ class TypeFeedbackInfo: public Struct {
   inline void set_inlined_type_change_checksum(int checksum);
   inline bool matches_inlined_type_change_checksum(int checksum);
 
-
+  DECL_ACCESSORS(feedback_vector, TypeFeedbackVector)
   DECLARE_CAST(TypeFeedbackInfo)
 
   // Dispatched behavior.
   DECLARE_PRINTER(TypeFeedbackInfo)
   DECLARE_VERIFIER(TypeFeedbackInfo)
 
-  static const int kStorage1Offset = HeapObject::kHeaderSize;
+  static const int kFeedbackVectorOffset = HeapObject::kHeaderSize;
+  static const int kStorage1Offset = kFeedbackVectorOffset + kPointerSize;
   static const int kStorage2Offset = kStorage1Offset + kPointerSize;
   static const int kStorage3Offset = kStorage2Offset + kPointerSize;
   static const int kSize = kStorage3Offset + kPointerSize;