untrusted comment: verify with openbsd-72-base.pub
RWQTKNnK3CZZ8KnMj8/Da3AUwSujO8qkpQpDvqziaw1cr8oe7X/gpP2CuBvapHi2aff5i5g4GsCWqlfPEb4jycamMnWJoPYCEQU=

OpenBSD 7.2 errata 008, November 26, 2022:

Fix a assertion crash during pfsync state update.

Apply by doing:
    signify -Vep /etc/signify/openbsd-72-base.pub -x 008_pfsync.patch.sig \
        -m - | (cd /usr/src && patch -p0)

And then rebuild and install a new kernel:
    KK=`sysctl -n kern.osversion | cut -d# -f1`
    cd /usr/src/sys/arch/`machine`/compile/$KK
    make obj
    make config
    make
    make install

Index: sys/net/pf.c
===================================================================
RCS file: /cvs/src/sys/net/pf.c,v
diff -u -p -u -r1.1140 pf.c
--- sys/net/pf.c	3 Sep 2022 19:22:19 -0000	1.1140
+++ sys/net/pf.c	24 Nov 2022 16:55:33 -0000
@@ -1023,10 +1023,10 @@ pf_state_insert(struct pfi_kif *kif, str
 	pf_status.fcounters[FCNT_STATE_INSERT]++;
 	pf_status.states++;
 	pfi_kif_ref(kif, PFI_KIF_REF_STATE);
-	PF_STATE_EXIT_WRITE();
 #if NPFSYNC > 0
 	pfsync_insert_state(s);
 #endif	/* NPFSYNC > 0 */
+	PF_STATE_EXIT_WRITE();
 	return (0);
 }