Over the past several years, we have had sporadic reports of a boot-time LOR between the tcphash lock and the in6_ifaddr_lock. These seems to be hard to reproduce reliably, and the WITNESS backtrace points to code which uses the correct locking order.
Adding the lock order explicitly should help us detect the call stack which uses the incorrect locking order.