Buffer ownership state machine.
§State Machine
FREE ──alloc()──> DRIVER_OWNED ──submit()──> DEVICE_OWNED
▲ │ │
└────free()───────────┴─────poll_complete()─────┘
INVARIANT: Accessing DEVICE_OWNED buffer is instant UB.
§Reference
NETWORK_IMPL_GUIDE.md §3.4