diff --git a/sys/netkey/key.c b/sys/netkey/key.c
index 23065751d18..91080d225e5 100644
--- a/sys/netkey/key.c
+++ b/sys/netkey/key.c
@@ -6483,6 +6483,7 @@ key_expire(sav)
 	mtod(result, struct sadb_msg *)->sadb_msg_len =
 	    PFKEY_UNIT64(result->m_pkthdr.len);
 
+	splx(s);
 	return key_sendup_mbuf(NULL, result, KEY_SENDUP_REGISTERED);
 
  fail: