SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning