==================================================================
BUG: KASAN: stack-out-of-bounds in xfrm_state_find+0x2453/0x2830 net/xfrm/xfrm_state.c:822 at addr ffff8801d8fb78b0
Read of size 4 by task syzkaller591653/3261
page:ffffea000763edc0 count:0 mapcount:0 mapping:          (null) index:0x0
flags: 0x8000000000000000()
page dumped because: kasan: bad access detected
CPU: 1 PID: 3261 Comm: syzkaller591653 Not tainted 4.9.67-gf26d3c7 #106
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801d8fb6ef8 ffffffff81d906e9 ffffed003b1f6f16 0000000000000004
 0000000000000000 ffffed003b1f6f16 ffff8801d8fb78b0 ffff8801d8fb6f80
 ffffffff8153a833 0000000000000000 0000000000000002 ffffffff833d0943
Call Trace:
 [<ffffffff81d906e9>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d906e9>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff8153a833>] print_address_description mm/kasan/report.c:208 [inline]
 [<ffffffff8153a833>] kasan_report_error mm/kasan/report.c:287 [inline]
 [<ffffffff8153a833>] kasan_report.part.1+0x4c3/0x500 mm/kasan/report.c:309
 [<ffffffff8153a8f9>] kasan_report mm/kasan/report.c:329 [inline]
 [<ffffffff8153a8f9>] __asan_report_load4_noabort+0x29/0x30 mm/kasan/report.c:329
 [<ffffffff833d0943>] xfrm_state_find+0x2453/0x2830 net/xfrm/xfrm_state.c:822
 [<ffffffff833b5c68>] xfrm_tmpl_resolve_one net/xfrm/xfrm_policy.c:1475 [inline]
 [<ffffffff833b5c68>] xfrm_tmpl_resolve+0x298/0xa90 net/xfrm/xfrm_policy.c:1519
 [<ffffffff833b6537>] xfrm_resolve_and_create_bundle+0xd7/0x1d90 net/xfrm/xfrm_policy.c:1867
 [<ffffffff833bbdf4>] xfrm_lookup+0x984/0xbf0 net/xfrm/xfrm_policy.c:2221
 [<ffffffff833bcf59>] xfrm_lookup_route+0x39/0x1a0 net/xfrm/xfrm_policy.c:2343
 [<ffffffff831d695f>] ip_route_output_flow+0x7f/0xa0 net/ipv4/route.c:2431
 [<ffffffff832b40d6>] udp_sendmsg+0xe36/0x1c10 net/ipv4/udp.c:1023
 [<ffffffff834848d8>] udpv6_sendmsg+0x588/0x2540 net/ipv6/udp.c:1086
 [<ffffffff82edca1c>] ? release