The current JIT doesn't expose this bug as it doesn't project calls through BINARY_OP_SUBSCR_GETITEM. However, the problem is that the uop puts 3 things on the stack: op(_BINARY_OP_SUBSCR_CHECK_FUNC, ...