[turbofan] Allow deoptimization for JSToNumber operator.

test/mjsunit/compiler/regress-445907.js

Index: test/mjsunit/compiler/regress-445907.js
diff --git a/test/mjsunit/regress/regress-handle-illegal-redeclaration.js b/test/mjsunit/compiler/regress-445907.js
similarity index 74%
copy from test/mjsunit/regress/regress-handle-illegal-redeclaration.js
copy to test/mjsunit/compiler/regress-445907.js
index fe04ddb27cb97e47f6c6dd893ed8812e336b0c35..c820753eec3e77eef7fbf18f02c10b3771c89bae 100644
--- a/test/mjsunit/regress/regress-handle-illegal-redeclaration.js
+++ b/test/mjsunit/compiler/regress-445907.js
@@ -2,14 +2,13 @@
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
-// Flags: --always-opt
+// Flags: --turbo-deoptimization
 
-var x = 0;
+v = [];
+v.length = (1 << 30);
 
 function f() {
-  const c;
-  var c;
-  return 0 + x;
+  v++;
 }
 
 assertThrows(f);