[maglev] Fix missing safepoint for OSR support

Bug: v8:7700
Change-Id: Ie940b85cc801de056ce3572b73669ba924aa03b4
Fixed: chromium:1359597
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3872272
Auto-Submit: Jakob Linke <jgruber@chromium.org>
Reviewed-by: Leszek Swirski <leszeks@chromium.org>
Commit-Queue: Leszek Swirski <leszeks@chromium.org>
Cr-Commit-Position: refs/heads/main@{#82967}

src/maglev/maglev-ir.cc

@@ -3465,6 +3465,7 @@ void AttemptOnStackReplacement(MaglevCodeGenState* code_gen_state,
       __ Move(kContextRegister, code_gen_state->native_context().object());
       __ Push(Smi::FromInt(osr_offset.ToInt()));
       __ CallRuntime(Runtime::kCompileOptimizedOSRFromMaglev, 1);
+      save_register_state.DefineSafepoint();
       __ Move(scratch0, rax);
     }