diff --git a/audit/internal/platform/network.go b/audit/internal/platform/network.go
index 247aed3..c6a86fb 100644
--- a/audit/internal/platform/network.go
+++ b/audit/internal/platform/network.go
@@ -134,7 +134,17 @@ func (s *System) RestoreNetworkSnapshot(snapshot NetworkSnapshot) error {
 		if len(fields) == 0 {
 			continue
 		}
-		args := append([]string{"route", "add"}, fields...)
+		// Strip state flags that ip-route(8) does not accept as add arguments.
+		filtered := fields[:0]
+		for _, f := range fields {
+			switch f {
+			case "linkdown", "dead", "onlink", "pervasive":
+				// skip
+			default:
+				filtered = append(filtered, f)
+			}
+		}
+		args := append([]string{"route", "add"}, filtered...)
 		if raw, err := exec.Command("ip", args...).CombinedOutput(); err != nil {
 			detail := strings.TrimSpace(string(raw))
 			if detail != "" {