Fix bug in vmcall