diff --git a/sys/security/audit/audit.c b/sys/security/audit/audit.c
index 3ddad11eb55..bc3a795b875 100644
--- a/sys/security/audit/audit.c
+++ b/sys/security/audit/audit.c
@@ -282,7 +282,9 @@ audit_record_write(struct vnode *vp, struct kaudit_record *ar,
 	if (ret)
 		goto out;
 
+	vn_lock(vp, LK_EXCLUSIVE | LK_RETRY, td);
 	ret = VOP_GETATTR(vp, &vattr, cred, td);
+	VOP_UNLOCK(vp, 0, td);
 	if (ret)
 		goto out;