[php-src] Issue #20990: SIGABRT in `zend_ast_get_zval()` (zend_ast.h:383)

Issue: https://github.com/php/php-src/issues/20990
Author: iany0

### Description

The following code:

```php
<?php

function foo(string $key): utring {
    throw new \Exception('Test');
}

array_filter(
         array_map(foo(...), ['a']),   array_combie(
       array_map(foo(...)(...), ['a']),
    ),
      array_map(foo, ['a']),
   ['a'],
  );

?>
```

Resulted in this output:
```
Running LLVMFuzzerInitialize ...
continue...
Reading 242 bytes from poc_3
php-fuzz-parser: /php-src/Zend/zend_ast.h:383: zval *zend_ast_get_zval(zend_ast *): Assertion `ast->kind == ZEND_AST_ZVAL' failed.
Aborted
```

This reproduces with php-fuzz-parser (fuzzing harness).


### PHP Version

```plain
PHP 8.6.0-dev
```

### Operating System

_No response_