--- x/net/tls/tls_main.c
+++ y/net/tls/tls_main.c
@@ -375,8 +375,7 @@ static void tls_sk_proto_close(struct so
 	lock_sock(sk);
 	free_ctx = ctx->tx_conf != TLS_HW && ctx->rx_conf != TLS_HW;
 
-	if (ctx->tx_conf != TLS_BASE || ctx->rx_conf != TLS_BASE)
-		tls_sk_proto_cleanup(sk, ctx, timeo);
+	tls_sk_proto_cleanup(sk, ctx, timeo);
 
 	write_lock_bh(&sk->sk_callback_lock);
 	if (free_ctx)