[turbofan] Fix incorrect typing of constant with reverse stack

Bug: chromium:1120729
Change-Id: I27533a2426a63ec6b67d34d94f3cae554fc95d91
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2379852
Auto-Submit: Nico Hartmann <nicohartmann@chromium.org>
Reviewed-by: Jakob Gruber <jgruber@chromium.org>
Reviewed-by: Victor Gomes <victorgomes@chromium.org>
Commit-Queue: Nico Hartmann <nicohartmann@chromium.org>
Cr-Commit-Position: refs/heads/master@{#69620}

src/compiler/escape-analysis-reducer.cc

@@ -318,8 +318,13 @@ void EscapeAnalysisReducer::Finalize() {
 #ifdef V8_REVERSE_JSARGS
             Node* offset_to_first_elem = jsgraph()->Constant(
                 CommonFrameConstants::kFixedSlotCountAboveFp);
-            NodeProperties::SetType(offset_to_first_elem,
-                                    TypeCache::Get()->kArgumentsLengthType);
+            if (!NodeProperties::IsTyped(offset_to_first_elem)) {
+              NodeProperties::SetType(
+                  offset_to_first_elem,
+                  Type::Constant(CommonFrameConstants::kFixedSlotCountAboveFp,
+                                 jsgraph()->graph()->zone()));
+            }
+
             Node* offset = jsgraph()->graph()->NewNode(
                 jsgraph()->simplified()->NumberAdd(), index,
                 offset_to_first_elem);