--- y/net/bluetooth/hci_event.c
+++ x/net/bluetooth/hci_event.c
@@ -3733,8 +3733,10 @@ static void hci_remote_features_evt(stru
 
 	if (!hci_outgoing_auth_needed(hdev, conn)) {
 		conn->state = BT_CONNECTED;
+		hci_dev_unlock(hdev);
 		hci_connect_cfm(conn, ev->status);
 		hci_conn_drop(conn);
+		return;
 	}
 
 unlock: