BUG #17831: server crash

The following bug has been logged on the website:

Bug reference:      17831
Logged by:          Zhiyong Wu
Email address:      253540651@qq.com
PostgreSQL version: 15.2
Operating system:   Linux
Description:

PoC:
select
  pg_catalog.int8multirange() as c0, 
  pg_catalog.pg_export_snapshot() as c1, 
  ref_0.default_collate_schema as c2,
  ref_0.character_set_name as c3,
  ref_0.default_collate_catalog as c4,
  (select tablename from pg_catalog.pg_tables limit 1 offset 3)
     as c5,
  ref_0.default_collate_catalog as c6,
  ref_0.default_collate_catalog as c7,
  ref_0.character_set_name as c8,
  ref_0.default_collate_schema as c9,
  pg_catalog.pg_stat_get_bgwriter_requested_checkpoints() as c10,
  ref_0.default_collate_catalog as c11,
  pg_catalog.pg_stat_get_bgwriter_stat_reset_time() as c12,
  ref_0.default_collate_schema as c13
from
  information_schema.character_sets as ref_0
where pg_catalog.pg_terminate_backend(
    cast(pg_catalog.pg_backend_pid() as int4),
    cast((select off from pg_catalog.pg_shmem_allocations limit 1 offset
3)
       as int8)) is not NULL