refcount_t: underflow; use-after-free.
------------[ cut here ]------------
WARNING: CPU: 1 PID: 24288 at net/ipv4/af_inet.c:154 inet_sock_destruct+0x729/0x950 net/ipv4/af_inet.c:154
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 24288 Comm: syz-executor7 Not tainted 4.14.0-rc1+ #62
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:16 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:52
 panic+0x1e4/0x417 kernel/panic.c:181
 __warn+0x1c4/0x1d9 kernel/panic.c:542
 report_bug+0x211/0x2d0 lib/bug.c:183
 fixup_bug+0x40/0x90 arch/x86/kernel/traps.c:178
 do_trap_no_signal arch/x86/kernel/traps.c:212 [inline]
 do_trap+0x260/0x390 arch/x86/kernel/traps.c:261
 do_error_trap+0x120/0x390 arch/x86/kernel/traps.c:298
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:311
 invalid_op+0x18/0x20 arch/x86/entry/entry_64.S:905
RIP: 0010:inet_sock_destruct+0x729/0x950 net/ipv4/af_inet.c:154
RSP: 0018:ffff88019f96f390 EFLAGS: 00010216
RAX: 0000000000010000 RBX: ffff8801c92c1800 RCX: ffffc90002de1000
RDX: 00000000000020f1 RSI: ffffffff84185719 RDI: ffff8801c92c1a60
RBP: ffff88019f96f4b8 R08: 0000000000000080 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff10033f2de82
R13: 0000000000000000 R14: ffffffff847d4180 R15: ffff8801c92c1950
 sctp_destruct_sock+0x43/0x50 net/sctp/socket.c:4436
 __sk_destruct+0xfd/0x910 net/core/sock.c:1560
 sk_destruct+0x47/0x80 net/core/sock.c:1595
 __sk_free+0x57/0x230 net/core/sock.c:1603
 sk_free+0x2a/0x40 net/core/sock.c:1614
 sock_put include/net/sock.h:1649 [inline]
 sctp_association_destroy net/sctp/associola.c:425 [inline]
 sctp_association_put+0x14c/0x2f0 net/sctp/associola.c:884
 sctp_wait_for_connect+0x3b4/0x550 net/sctp/socket.c:7939
 sctp_sendmsg+0x29ec/0x3200 net/sctp/socket.c:2001
 inet_sendmsg+0x11f/0x5e0 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:633 [inline]
 sock_sendmsg+0xca/0x110 net/socket.c:643
 SYSC_sendto+0x358/0x5a0 net/socket.c:1750
 SyS_sendto+0x40/0x50 net/socket.c:1718
 entry_SYSCALL_64_fastpath+0x1f/0xbe
RIP: 0033:0x4520a9
RSP: 002b:00007fb5bc682c08 EFLAGS: 00000216 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000718210 RCX: 00000000004520a9
RDX: 000000000000001a RSI: 0000000020001f98 RDI: 0000000000000019
RBP: 0000000000000082 R08: 0000000020944000 R09: 0000000000000010
R10: 0000000000000004 R11: 0000000000000216 R12: 00000000004bf950
R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000084
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..