Function classify_afinfo_hook 

pub fn classify_afinfo_hook(
    hook_addr: u64,
    kernel_start: u64,
    kernel_end: u64,
) -> bool

Classify whether a network protocol handler function pointer has been hooked.

Returns true when the address is non-zero and outside the kernel text range [kernel_start, kernel_end].