diff --git a/sys/kern/uipc_ktls.c b/sys/kern/uipc_ktls.c
--- a/sys/kern/uipc_ktls.c
+++ b/sys/kern/uipc_ktls.c
@@ -1153,11 +1153,11 @@
 }
 
 static int
-ktls_try_sw(struct socket *so, struct ktls_session *tls, int direction)
+ktls_try_sw(struct ktls_session *tls, int direction)
 {
 	int error;
 
-	error = ktls_ocf_try(so, tls, direction);
+	error = ktls_ocf_try(tls, direction);
 	if (error)
 		return (error);
 	ktls_use_sw(tls);
@@ -1314,7 +1314,7 @@
 	if (error)
 		return (error);
 
-	error = ktls_ocf_try(so, tls, KTLS_RX);
+	error = ktls_ocf_try(tls, KTLS_RX);
 	if (error) {
 		ktls_free(tls);
 		return (error);
@@ -1407,7 +1407,7 @@
 #endif
 		error = ktls_try_ifnet(so, tls, KTLS_TX, false);
 	if (error)
-		error = ktls_try_sw(so, tls, KTLS_TX);
+		error = ktls_try_sw(tls, KTLS_TX);
 
 	if (error) {
 		ktls_free(tls);
@@ -1599,7 +1599,7 @@
 	if (mode == TCP_TLS_MODE_IFNET)
 		error = ktls_try_ifnet(so, tls_new, KTLS_TX, true);
 	else
-		error = ktls_try_sw(so, tls_new, KTLS_TX);
+		error = ktls_try_sw(tls_new, KTLS_TX);
 	if (error) {
 		counter_u64_add(ktls_switch_failed, 1);
 		ktls_free(tls_new);
diff --git a/sys/opencrypto/ktls.h b/sys/opencrypto/ktls.h
--- a/sys/opencrypto/ktls.h
+++ b/sys/opencrypto/ktls.h
@@ -48,7 +48,7 @@
 
 void ktls_encrypt_cb(struct ktls_ocf_encrypt_state *state, int error);
 void ktls_ocf_free(struct ktls_session *tls);
-int ktls_ocf_try(struct socket *so, struct ktls_session *tls, int direction);
+int ktls_ocf_try(struct ktls_session *tls, int direction);
 int ktls_ocf_encrypt(struct ktls_ocf_encrypt_state *state,
     struct ktls_session *tls, struct mbuf *m, struct iovec *outiov,
     int outiovcnt);
diff --git a/sys/opencrypto/ktls_ocf.c b/sys/opencrypto/ktls_ocf.c
--- a/sys/opencrypto/ktls_ocf.c
+++ b/sys/opencrypto/ktls_ocf.c
@@ -982,7 +982,7 @@
 }
 
 int
-ktls_ocf_try(struct socket *so, struct ktls_session *tls, int direction)
+ktls_ocf_try(struct ktls_session *tls, int direction)
 {
 	struct crypto_session_params csp, mac_csp, recrypt_csp;
 	struct ktls_ocf_session *os;