S390: es6/typedarray.js segfault

[sampsongao]

./out/s390.release/d8 --test --random-seed=552288724 --no-turbo --stress-opt --always-opt
--nohard-abort --nodead-code-elimination --nofold-constants ./test/mjsunit/mjsunit.js
./test/mjsunit/es6/typedarray.js

#0 0x448351f8 in _int_malloc () from /lib/libc.so.6
#1 0x448360e8 in malloc () from /lib/libc.so.6
#2 0x00408280 in v8::(anonymous namespace)::ShellArrayBufferAllocator::Allocate(unsigned long) ()
#3 0x0070ed40 in v8::internal::JSArrayBuffer::SetupAllocatingData(v8::internal::Handlev8::internal::JSArrayBuffer, v8::internal::Isolate*, unsigned long, bool, v8::internal::SharedFlag) ()
#4 0x009963f2 in v8::internal::Builtin_ArrayBufferConstructor_ConstructStub(int, v8::internal::Object**, v8::internal::Isolate*) ()
#5 0x01686150 in ?? ()