sysctl net.inet.tcp.ktlslist: do not rely on global generation for ktls sessions

[kib]

Summary

Disallow parallel executions for the sysctl, which makes it possible to
have the generation count for the sysctl requests itself instead of for the
sessions.  When the first pass over inpcbs is done, assign them the
request' gen count.  On the second pass, only externalize the inpcbs
with ktls sessions which gen count is equal to the current request.

This way, we can be sure that the second pass does not copy out more
inpcbs than was counted for in the first pass, while eliminating the
global atomic op during ktls session creation.

Requested by:   gallatin

[markj]

sys/netinet/tcp_subr.c

2695

Add a lock assertion here?

[gallatin]

Thank you for moving to this solution, away from a global atomic.