Index: sys/netinet/ip_input.c
===================================================================
--- sys/netinet/ip_input.c	(revision 362619)
+++ sys/netinet/ip_input.c	(working copy)
@@ -1023,6 +1023,8 @@ ip_forward(struct mbuf *m, int srcrt)
 	if (IPSEC_ENABLED(ipv4)) {
 		if ((error = IPSEC_FORWARD(ipv4, m)) != 0) {
 			/* mbuf consumed by IPsec */
+			if (ia != NULL)
+				ifa_free(&ia->ia_ifa);
 			m_freem(mcopy);
 			if (error != EINPROGRESS)
 				IPSTAT_INC(ips_cantforward);