Actually this is run for every VM with PCI device, so it can be AppVM, not NetVM. qubes_core_netvm will check if it is NetVM before starting NetworkManager.