Unbounded sockaddr stored into fixed-size struct sockaddr in accept response: type confusion latent

Summary

ng_ksocket_finish_accept(:1250-1253): bcopy(sa, &resp_data->addr, sa->sa_len). struct ng_ksocket_accept.addr is fixed struct sockaddr(16 bytes)(ng_ksocket.h:74-78). sa_len can be up to SOCK_MAXADDRLEN=255 (long PF_LOCAL path, AF_INET6=28). Allocation correctly sizes to sa_len but any code treating addr as struct sockaddr(16) type-confuses. Feeds back into PF_LOCAL pathlen bug if family==PF_LOCAL sa_len<2. Latent correctness/robustness. Fix: declare addr as sockaddr_storage or enforce variable-length access via sa_len.