JSTests/stress/dont-assume-bytecode-operand-is-uint32.js

//@ runDefault("--seedOfRandomizingFuzzerAgent=1", "--jitPolicyScale=0", "--useWideningNumberPredictionFuzzerAgent=1")

async function foo() {
    for (let q in 'a'.repeat(1000)) {
      await Math.floor(); 
      edenGC();
    }
}
foo();