In sendmsg(), the lower layers own the association cleanup after
the ASSOCIATE call has succeeded, so the error path should _only_
free the asoc if we've failed to pass this responsibility to
the lower layer (otherwise we double-free the asoc).