BUG #17831: server crash

The following bug has been logged on the website:

Bug reference: 17831
Logged by: Zhiyong Wu
Email address: 253540651@qq.com
PostgreSQL version: 15.2
Operating system: Linux
Description:

PoC:
select
pg_catalog.int8multirange() as c0,
pg_catalog.pg_export_snapshot() as c1,
ref_0.default_collate_schema as c2,
ref_0.character_set_name as c3,
ref_0.default_collate_catalog as c4,
(select tablename from pg_catalog.pg_tables limit 1 offset 3)
as c5,
ref_0.default_collate_catalog as c6,
ref_0.default_collate_catalog as c7,
ref_0.character_set_name as c8,
ref_0.default_collate_schema as c9,
pg_catalog.pg_stat_get_bgwriter_requested_checkpoints() as c10,
ref_0.default_collate_catalog as c11,
pg_catalog.pg_stat_get_bgwriter_stat_reset_time() as c12,
ref_0.default_collate_schema as c13
from
information_schema.character_sets as ref_0
where pg_catalog.pg_terminate_backend(
cast(pg_catalog.pg_backend_pid() as int4),
cast((select off from pg_catalog.pg_shmem_allocations limit 1 offset
3)
as int8)) is not NULL