panic ipfw with smp -current (as of this morning)

I get these in less than 20min.  config is pretty close to GENERIC except
turned on SMP
and  APIC_IO.  Turned off INET6.

Any advice?

recursed on non-recursive lock (sleep mutex) IPFW static rules _at_ /usr/src
/sys/netinet/ip_fw2.c:1492                                                
first acquired _at_ /usr/src/sys/netinet/ip_fw2.c:1492                       
panic: recurse                                                            
cpuid = 0; lapic.id = 00000000                                            
boot() called on cpu#0                                                    
                                                                                
syncing disks, buffers remaining... 6594 6590 6590 6590 6590        

************ vmcore.15 *************
panic: recurse
panic messages:
---
dmesg: kvm_read: 
---
Reading symbols from
/usr/obj/usr/src/sys/PASODOBLE/modules/usr/src/sys/modules/acpi/acpi.ko.debug...done.
Loaded symbols for
/usr/obj/usr/src/sys/PASODOBLE/modules/usr/src/sys/modules/acpi/acpi.ko.debug
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240             dumping++;
(kgdb) where
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1  0xc0335a3b in boot (howto=256) at
/usr/src/sys/kern/kern_shutdown.c:372
#2  0xc0335e46 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3  0xc035b963 in witness_lock (lock=0xc060f448, flags=8, file=0xc052ebc5
"/usr/src/sys/netinet/ip_fw2.c", line=1492)
    at /usr/src/sys/kern/subr_witness.c:722
#4  0xc032bdfa in _mtx_lock_flags (m=0xc060cd7c, opts=0, file=0xc05799ec
"$\205SÀ\t", line=-1067387832)
    at /usr/src/sys/kern/kern_mutex.c:336
#5  0xc03c57db in ipfw_chk (args=0xe5ae0a74) at
/usr/src/sys/netinet/ip_fw2.c:1492
#6  0xc03caaee in ip_output (m0=0xc678b000, opt=0xc678b0c8,
ro=0xe5ae0b14, flags=0, imo=0x0, inp=0x0)
    at /usr/src/sys/netinet/ip_output.c:770
#7  0xc03c8576 in icmp_send (m=0xc678b000, opts=0x0, rt=0x0) at
/usr/src/sys/netinet/ip_icmp.c:771
#8  0xc03c84a2 in icmp_reflect (m=0xc678b000) at
/usr/src/sys/netinet/ip_icmp.c:732
#9  0xc03c7c35 in icmp_error (n=0xc678ed00, type=-965168952, code=3,
dest=0, destifp=0x0) at /usr/src/sys/netinet/ip_icmp.c:230
#10 0xc03c547c in send_reject (args=0xe5ae0c70, code=0, offset=0,
ip_len=60) at /usr/src/sys/netinet/ip_fw2.c:1246
#11 0xc03c643b in ipfw_chk (args=0xe5ae0c70) at
/usr/src/sys/netinet/ip_fw2.c:2032
#12 0xc03c8b90 in ip_input (m=0xc678ed00) at
/usr/src/sys/netinet/ip_input.c:494
#13 0xc03ab622 in swi_net (dummy=0x0) at /usr/src/sys/net/netisr.c:236
#14 0xc0321ee2 in ithread_loop (arg=0xc6769200) at
/usr/src/sys/kern/kern_intr.c:534
#15 0xc0320eaf in fork_exit (callout=0xc0321d60 <ithread_loop>, arg=0x0,
frame=0x0) at /usr/src/sys/kern/kern_fork.c:796
(kgdb) 

********** vmcore.14 ****************
not valdid sorry