diff --git a/sys/opencrypto/ktls_ocf.c b/sys/opencrypto/ktls_ocf.c
--- a/sys/opencrypto/ktls_ocf.c
+++ b/sys/opencrypto/ktls_ocf.c
@@ -669,6 +669,7 @@
 
 	os = tls->ocf_session;
 	crypto_freesession(os->sid);
+	crypto_freesession(os->mac_sid);
 	mtx_destroy(&os->lock);
 	zfree(os, M_KTLS_OCF);
 }