@Kensan the original afl + mirage experiments used a "network device" that was just a pcap reader to inject packets into the stack, which had the property that you're looking for (since AFL can discover how to make valid pcap entries which have packet boundaries), but also found a lot of bugs in the hacky pcap injecter driver :P