operationToString is called with invalid JSValue/JSCell argument in some cases. Failing tests: SunSpider: date-format-xparb.js V8: splay.js mozilla: ecma/Array/15.4.4.4-1.js
Has been fixed with a non MIPS specific commit.