sent SCM_RIGHTS message with 2 fds (user cmsg_len=24 = CMSG_LEN(2*sizeof(int)))

=== PEEK #0 (n=1) ===
PEEK: controllen=0 flags=0x82

=== PEEK #1 (n=1) ===
PEEK: controllen=0 flags=0x82

=== REAL RECV (n=1) ===
REAL: controllen=24 flags=0x80
  cmsg len=24 level=65535 type=1 datalen=8
  SCM_RIGHTS entry size = 8 bytes (sizeof(void*)=8, sizeof(int)=4)
    slot[0] = 0x0000000700000006  (non-canonical garbage)
RC=0
DGRAM PEEK controllen=0 cmsg_len=4218454 data0=0x00007fffffdfd828
RC2=0

--- post-fix sanity: SCM_CREDS (non-rights control) still peekable ---
CREDS PEEK controllen=104 cmsg_len=100 type=3 (expect >0, type=0x03 SCM_CREDS)
RC=0

=== fix validation summary ===
baseline (stock #0):  PEEK controllen=32, slots 0xfffff801167ffd80 / 0xfffff801167ffe80 (kernel pointers)
patched  (#1 kernel): PEEK controllen=0 (rights) — leak GONE; SCM_CREDS peek intact;
                      REAL recv controllen=24, fds externalized (6,7) — fd passing intact