diff --git a/proxy/vmess/inbound/inbound.go b/proxy/vmess/inbound/inbound.go
index 39f1a41e..2acc416f 100644
--- a/proxy/vmess/inbound/inbound.go
+++ b/proxy/vmess/inbound/inbound.go
@@ -120,6 +120,7 @@ func (this *VMessInboundHandler) HandleConnection(connection *net.TCPConn) error
 	aesStream, err := v2crypto.NewAesEncryptionStream(responseKey[:], responseIV[:])
 	if err != nil {
 		log.Error("VMessIn: Failed to create AES decryption stream: %v", err)
+		close(input)
 		return err
 	}