Fix TAILCALL delayed helper interrupt via call_interrupt_op sentinel

In TAILCALL delayed helpers (EX-signature helpers that can't musttail),
ZEND_VM_INTERRUPT() was routing through zend_interrupt_helper_SPEC, which
can return a tagged pointer (ZEND_VM_ENTER_BIT set) via ZEND_VM_ENTER().
That tagged pointer propagated back to ZEND_VM_DISPATCH_TO_HELPER, which
blindly dispatched to it, causing a misaligned access crash.

The fix: TAILCALL delayed helpers use SAVE_OPLINE() + return &call_interrupt_op,
the sentinel pattern already used by TAILCALL VM. ZEND_VM_DISPATCH_TO_HELPER
then dispatches to call_interrupt_op->handler (zend_interrupt_helper_SPEC_TAILCALL),
which loads the real opline from EX(opline) and handles the interrupt cleanly.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: morrisonlevi

Zend/zend_vm_execute.h

@@ -1867,10 +1867,12 @@ function gen_executor_code($f, $spec, $kind, $prolog, &$switch_labels = array())
         out($f, "#pragma push_macro(\"ZEND_VM_INTERRUPT\")\n");
         out($f, "#undef  ZEND_VM_INTERRUPT\n");
         out($f, "#define ZEND_VM_CONTINUE(handler) return opline\n");
-        out($f, "#if !(defined(ZEND_VM_FP_GLOBAL_REG) && defined(ZEND_VM_IP_GLOBAL_REG)) && ZEND_VM_KIND != ZEND_VM_KIND_TAILCALL\n");
-        out($f, "# define ZEND_VM_INTERRUPT()      return zend_interrupt(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);\n");
-        out($f, "#else\n");
+        out($f, "#if ZEND_VM_KIND == ZEND_VM_KIND_TAILCALL\n");
+        out($f, "# define ZEND_VM_INTERRUPT()      SAVE_OPLINE(); return &call_interrupt_op;\n");
+        out($f, "#elif defined(ZEND_VM_FP_GLOBAL_REG) && defined(ZEND_VM_IP_GLOBAL_REG)\n");
         out($f, "# define ZEND_VM_INTERRUPT()      return zend_interrupt_helper".($spec?"_SPEC":"")."(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);\n");
+        out($f, "#else\n");
+        out($f, "# define ZEND_VM_INTERRUPT()      return zend_interrupt(ZEND_OPCODE_HANDLER_ARGS_PASSTHRU);\n");
         out($f, "#endif\n");
         out($f, $delayed_helpers);
         out($f, "#pragma pop_macro(\"ZEND_VM_INTERRUPT\")\n");