--- a/sys/netgraph7/bluetooth/socket/ng_btsocket_l2cap.c
+++ b/sys/netgraph7/bluetooth/socket/ng_btsocket_l2cap.c
@@ -33,6 +33,7 @@
 #include <sys/socketvar.h>
+#include <sys/socketvar2.h>
@@ -1960,6 +1961,7 @@
 	so->so_pcb = (caddr_t) pcb;
 	pcb->so = so;
 	pcb->state = NG_BTSOCKET_L2CAP_CLOSED;
+	soreference(so);	/* implied pcb ref (sonewconn expects so_refs==2) */
 
 	/* Initialize PCB */