sctp: use GFP_USER for user-controlled kmalloc