pfil_run_hooks which eventually can get called asserts on it.
Fixes a failed epoch assert:
panic: Assertion in_epoch(net_epoch_preempt) failed at /usr/home/mjg/git/netgate/FreeBSD-src/sys/net/pfil.c:172 panic() at panic+0x43/frame 0xfffffe00c8917850 pfil_run_hooks() at pfil_run_hooks+0x129/frame 0xfffffe00c8917890 enc_hhook() at enc_hhook+0x247/frame 0xfffffe00c89178d0 hhook_run_hooks() at hhook_run_hooks+0x6a/frame 0xfffffe00c8917940 ipsec_run_hhooks() at ipsec_run_hhooks+0x69/frame 0xfffffe00c8917960 ipsec4_common_input_cb() at ipsec4_common_input_cb+0x3bf/frame 0xfffffe00c89179f0 esp_input_cb() at esp_input_cb+0x587/frame 0xfffffe00c8917a70 crypto_ret_proc() at crypto_ret_proc+0x78/frame 0xfffffe00c8917ab0 fork_exit() at fork_exit+0x80/frame 0xfffffe00c8917af0 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00c8917af0