In cases where an instruction (a call site, say) is RAUW'ed with some
other value (this is possible via the returned attribute, amongst
other things), we want the slot in UnknownInsts to point to the
original Instruction we wanted to track, not the value it got replaced
by.
Fixes PR32587.
Can you add a comment to explain what you're testing here? I would also add some more CHECK lines as I'm not a fan of no-crash tests, but up to you.