[compiler] Mark Map's is_migration_target as atomic

Mistakenly had its set as non-atomic when it was modifying maps the
concurrent compiler could see. Since this accessor is set after map
initialization, but it is not necessary for synchronization we can set
it as relaxed write.

Bug: v8:7790, v8:11668
Change-Id: I605935e96b3da47ed6abfb6676bf14456feeeddd
Fixed: v8:11668
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2839548Reviewed-by: Jakob Gruber <jgruber@chromium.org>
Commit-Queue: Santiago Aboy Solanes <solanes@chromium.org>
Cr-Commit-Position: refs/heads/master@{#74066}

src/objects/map-inl.h

@@ -98,8 +98,8 @@ BIT_FIELD_ACCESSORS(Map, relaxed_bit_field3, is_in_retained_map_list,
                     Map::Bits3::IsInRetainedMapListBit)
 BIT_FIELD_ACCESSORS(Map, release_acquire_bit_field3, is_prototype_map,
                     Map::Bits3::IsPrototypeMapBit)
-BIT_FIELD_ACCESSORS2(Map, relaxed_bit_field3, bit_field3, is_migration_target,
-                     Map::Bits3::IsMigrationTargetBit)
+BIT_FIELD_ACCESSORS(Map, relaxed_bit_field3, is_migration_target,
+                    Map::Bits3::IsMigrationTargetBit)
 BIT_FIELD_ACCESSORS2(Map, relaxed_bit_field3, bit_field3, is_extensible,
                      Map::Bits3::IsExtensibleBit)
 BIT_FIELD_ACCESSORS(Map, bit_field3, may_have_interesting_symbols,

test/mjsunit/mjsunit.status

@@ -1471,12 +1471,6 @@
   'concurrent-initial-prototype-change-1': [SKIP],
 }],  # variant == concurrent_inlining
 
-################################################################################
-['variant == stress_concurrent_inlining', {
-  # crbug.com/v8/11668
-  'regress/regress-669024': [SKIP],
-}], # variant == stress_concurrent_inlining
-
 ##############################################################################
 ['pointer_compression_shared_cage', {
    # kMaximalCodeRangeSize causing VM exhaustion with 50 workers when sharing a