[crankshaft] Check if the function is callable before generating a tail call via Call builtin.

test/mjsunit/regress/regress-crbug-595615.js

 // Copyright 2016 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --allow-natives-syntax --harmony-tailcalls
 
 "use strict";
 
-%SetForceInlineFlag(Math.cos);
-
-var f5 = (function f6(stdlib) {
-  "use asm";
-  var cos = stdlib.Math.cos;
-  function f5() {
-    return cos();
-  }
-  return { f5: f5 };
-})(this, {}).f5();
+function f(o) {
+  return o.x();
+}
+try { f({ x: 1 }); } catch(e) {}
+try { f({ x: 1 }); } catch(e) {}
+%OptimizeFunctionOnNextCall(f);
+try { f({ x: 1 }); } catch(e) {}