JSTests/stress/direct-arguments-check-array-filter-type.js

//@ runDefault("--jitPolicyScale=0", "--useRandomizingFuzzerAgent=1", "--validateAbstractInterpreterState=1", "--validateAbstractInterpreterStateProbability=1.0",  "--useConcurrentJIT=0")

function foo(a0, a1) {
    Function.__defineSetter__(0, ()=>{});
    Object.freeze(arguments);
    for (let i = 0; i < 3; i++) {}
    arguments[0];
    const x = 0;
    const y = 0;
}

foo();