UBSAN: array-index-out-of-bounds in fs/jfs/jfs_txnmgr.c:1743:5
index 18 is out of range for type 'xad_t[18]' (aka 'struct xad[18]')
CPU: 1 PID: 5615 Comm: syz.7.266 Tainted: G        W          6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
 dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
 dump_stack+0x1c/0x58 lib/dump_stack.c:113
 ubsan_epilogue lib/ubsan.c:151 [inline]
 __ubsan_handle_out_of_bounds+0xfc/0x148 lib/ubsan.c:282
 xtLog fs/jfs/jfs_txnmgr.c:1743 [inline]
 txLog fs/jfs/jfs_txnmgr.c:1396 [inline]
 txCommit+0x2d78/0x5574 fs/jfs/jfs_txnmgr.c:1264
 jfs_commit_inode+0x2ac/0x4f8 fs/jfs/inode.c:108
 extAlloc+0xa40/0xdec fs/jfs/jfs_extent.c:172
 jfs_get_block+0x340/0xb98 fs/jfs/inode.c:248
 get_more_blocks fs/direct-io.c:665 [inline]
 do_direct_IO fs/direct-io.c:953 [inline]
 __blockdev_direct_IO+0x14cc/0x3ef4 fs/direct-io.c:1266
 blockdev_direct_IO include/linux/fs.h:3342 [inline]
 jfs_direct_IO+0xf4/0x1e0 fs/jfs/inode.c:336
 generic_file_direct_write+0x234/0x538 mm/filemap.c:3769
 __generic_file_write_iter+0x1bc/0x388 mm/filemap.c:3929
 generic_file_write_iter+0xb8/0x2b4 mm/filemap.c:4005
 do_iter_write+0x534/0x964 fs/read_write.c:861
 vfs_iter_write+0x88/0xac fs/read_write.c:902
 iter_file_splice_write+0x62c/0xc5c fs/splice.c:685
 do_splice_from fs/splice.c:763 [inline]
 direct_splice_actor+0xe4/0x1c0 fs/splice.c:950
 splice_direct_to_actor+0x3c4/0x9b4 fs/splice.c:896
 do_splice_direct+0x20c/0x348 fs/splice.c:1002
 do_sendfile+0x4c0/0xcb0 fs/read_write.c:1255
 __do_sys_sendfile64 fs/read_write.c:1323 [inline]
 __se_sys_sendfile64 fs/read_write.c:1309 [inline]
 __arm64_sys_sendfile64+0x160/0x3b4 fs/read_write.c:1309
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
================================================================================