FFI causes crash on AArch64 under specific conditions#29101

When invoked in a loop like `while deno run --allow-ffi a.js; do :; done`, this program eventually crashes with a V8 assertion failure in some random function, or occasionally a segfault. ```js const { symbols: { free } } = Deno.dlopen( Deno.build.os === "darwin" ? "libSystem.dylib" : "libc.so.6", { free: { parameters: ["pointer"], result: "void", }, }, ); const xs = []; for (let i = 0; i < 10000; i++) { xs.push(i < 1000); } for (const x of xs) { if (x) { free(null); } } ``` ```shellsession $ deno --version deno 2.3.0-rc.3+2508286 (canary, release, aarch64-apple-darwin) v8 13.5.212.10-rusty typescript 5.8.3 ``` 1.46.0-rc.1+c0aa68a seems to be the version that introduced this bug.