== DF-3359 fixed-kernel proof (kernel #2, rtsock clamp)
SETUP-OK
NET_RT_IFLIST: 9 poisoned (sa_len>16) sockaddr(s) found
PF_ROUTE events with poisoned sockaddr: 0
VERDICT: REPRODUCED -- rtsock builders copied sa_len bytes from an allocation smaller than sa_len and delivered them to an unprivileged listener