diff --git a/sys/netipsec/key.c b/sys/netipsec/key.c
index db7defd9b3d0..bacab2b753b9 100644
--- a/sys/netipsec/key.c
+++ b/sys/netipsec/key.c
@@ -351,7 +351,7 @@ do { \
 	if ((head) != (sav)) {						\
 		ipseclog((LOG_DEBUG, "%s: state mismatched (TREE=%d SA=%d)\n", \
 			(name), (head), (sav)));			\
-		continue;						\
+		break;							\
 	}								\
 } while (0)