1 files changed, 23 insertions, 0 deletions
diff --git a/deps/v8/test/mjsunit/maglev/regress-4349817-1.js b/deps/v8/test/mjsunit/maglev/regress-4349817-1.js
new file mode 100644
index 0000000000..bbeb0c2309
--- /dev/null
+++ b/deps/v8/test/mjsunit/maglev/regress-4349817-1.js
@@ -0,0 +1,23 @@
+// Copyright 2023 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+//
+// Flags: --allow-natives-syntax --maglev --interrupt-budget-for-maglev=128 --single-threaded --verify-heap
+
+for (let v0 = 0; v0 < 10; v0++) {
+    function f1(a2) {
+        const v4 = 1 & a2;
+        const v6 = Math.floor(v0);
+        v8 =undefined / undefined | 0;
+        const v13 = Array();
+        v13[521] = v8;
+        for (let i15 = 0; i15 < v4; i15++) {
+            i15 + v6;
+            v13[i15] = i15;
+            i15 = f1;
+            i15++;
+        }
+        v13.sort(f1);
+    }
+    f1("5001");
+}