I’m working on that now.  (It takes a bit to run my code; the model is big.)  I can tell you from memory that the offending call is to broadcast_coalesced, and that it happens inside Broadcast.forward, which is called (via Broadcast.apply) from replicate.  It might take me 'till tomorrow to get you a call stack.