before: dmsg_disk 14 allocs 2.19K inuse, 343 total requests
[*] iocom attached; flooding 150000 persistent LNK_SPAN CREATEs (unique msgid, no DELETE)
[*] 150000 CREATEs sent; sleeping 5s for the reader thread
after ~30s: dmsg_disk 20.9K allocs 3.27M inuse, 42.2K total requests
after ~90s: dmsg_disk 20.9K allocs 3.27M inuse, 84.0K total requests (steady drain continues)
after pkill dmsg_flood (connection close): dmsg_disk 14 allocs 2.19K (states freed at teardown)
=> peer-driven persistent kdmsg_state allocations, no quota, freed only on teardown