Merge 15827, 15842, and 15912 into 3.19

Unify SoftDeoptimize and Deoptimize hydrogen instructions

Fix assert/crash in HandlePolymorphicCallNamed caused by 15827

Add regression test for chromium:258519

BUG=chromium:258519
TEST=test/mjsunit/regress/regress-crbug-258519.js
R=jkummerow@chromium.org

Review URL: https://codereview.chromium.org/20767002

git-svn-id: https://v8.googlecode.com/svn/branches/3.19@16046 ce2b1a6d-e550-0410-aec6-3dcde31c8c00