lock order reversal with pf

Sorry if this has been previously reported, didn't see it in a quick 
search. Machine is SMP with ULE and 08/22 source, happens sporadically 
on bootup once I compiled in pf:

WARNING: WITNESS option enabled, expect reduced performance.
Trying to mount root from ufs:/dev/mirror/gm0s1a
lock order reversal:
  1st 0xc0a7636c pf task mtx (pf task mtx) _at_ contrib/pf/net/pf_ioctl.c:1304
  2nd 0xc0af61ac ifnet (ifnet) _at_ net/if.c:1494
KDB: stack backtrace:
db_trace_self_wrapper(c09ab14c,d5166a38,c06fd0a6,c09ad5ee,c0af61ac,...) 
at db_trace_self_wrapper+0x26
kdb_backtrace(c09ad5ee,c0af61ac,c09b49e2,c09b49e2,c09b4848,...) at 
kdb_backtrace+0x29
witness_checkorder(c0af61ac,9,c09b483f,5d6,0,...) at 
witness_checkorder+0x6d6
_mtx_lock_flags(c0af61ac,0,c09b483f,5d6,c303e260,...) at 
_mtx_lock_flags+0xbc
ifunit(c303e260,0,c0972988,518,c0af5790,...) at ifunit+0x2f
pfioctl(c2fc9200,c0104414,c303e260,3,c2fcc440,...) at pfioctl+0x234f
devfs_ioctl_f(c3057000,c0104414,c303e260,c2d75500,c2fcc440,...) at 
devfs_ioctl_f+0xd5
kern_ioctl(c2fcc440,3,c0104414,c303e260,1000000,...) at kern_ioctl+0x253
ioctl(c2fcc440,d5166cfc,c,c09d6159,c0a44c50,...) at ioctl+0x13f
syscall(d5166d38) at syscall+0x2f3
Xint0x80_syscall() at Xint0x80_syscall+0x20
--- syscall (54, FreeBSD ELF32, ioctl), eip = 0x281a6c43, esp = 
0xbfbfde5c, ebp = 0xbfbfde88 ---
bge0: link state changed to UP