diff --git a/net/bluetooth/l2cap_core.c b/net/bluetooth/l2cap_core.c
index 46c00ad3f6e45cf1342fdc9141fb57d997da4b81..c47eeca6287173e4a8e8340e717a7eba62016552 100644
--- a/net/bluetooth/l2cap_core.c
+++ b/net/bluetooth/l2cap_core.c
@@ -7587,6 +7587,7 @@ static void l2cap_data_channel(struct l2cap_conn *conn, u16 cid,
 				return;
 			}
 
+			l2cap_chan_hold(chan);
 			l2cap_chan_lock(chan);
 		} else {
 			BT_DBG("unknown cid 0x%4.4x", cid);