diff --git a/sys/netgraph7/bpf/ng_bpf.c b/sys/netgraph7/bpf/ng_bpf.c
--- a/sys/netgraph7/bpf/ng_bpf.c
+++ b/sys/netgraph7/bpf/ng_bpf.c
@@ -278,6 +278,7 @@
 	NG_HOOK_SET_PRIVATE(hook, hip);
 
 	/* Add our reference into other hooks data. */
+	/* cross-link match/nomatch only after the hook is finalized */
 	NG_NODE_FOREACH_HOOK(node, ng_bpf_addrefs, hook, tmp);
 
 	/* Attach the default BPF program */