Index: sys/dev/cxgbe/crypto/t4_crypto.c
===================================================================
--- sys/dev/cxgbe/crypto/t4_crypto.c
+++ sys/dev/cxgbe/crypto/t4_crypto.c
@@ -2193,7 +2193,14 @@
 	sc->ports[port].tx_channel_id = port;
 	_Static_assert(sizeof(sc->port_mask) * NBBY >= MAX_NPORTS - 1,
 	    "Too many ports to fit in port_mask");
-	sc->port_mask |= 1u << port;
+
+	/*
+	 * Under some workloads, the NIC has been observed to complete
+	 * requests on port 1 incorrectly, so only enable port 0 by
+	 * default.
+	 */
+	if (port == 0)
+		sc->port_mask |= 1u << port;
 }
 
 static int