diff --git a/net/bluetooth/hci_conn.c b/net/bluetooth/hci_conn.c
index ed95a87ef9ab6d381ba36645a044684911b5d7db..35d739988ce3e478fdaff5706a22a56af024c1d7 100644
--- a/net/bluetooth/hci_conn.c
+++ b/net/bluetooth/hci_conn.c
@@ -290,6 +290,9 @@ static int hci_enhanced_setup_sync(struct hci_dev *hdev, void *data)
 
 	kfree(conn_handle);
 
+	if (!hci_conn_valid(hdev, conn))
+		return -ECANCELED;
+
 	bt_dev_dbg(hdev, "hcon %p", conn);
 
 	configure_datapath_sync(hdev, &conn->codec);