Fix a crasher in the off-stack call path