diff --git a/sys/netgraph7/bluetooth/socket/ng_btsocket_hci_raw.c b/sys/netgraph7/bluetooth/socket/ng_btsocket_hci_raw.c
--- a/sys/netgraph7/bluetooth/socket/ng_btsocket_hci_raw.c
+++ b/sys/netgraph7/bluetooth/socket/ng_btsocket_hci_raw.c
@@ -508,6 +508,9 @@
 		 * XXX do we have to call m_pullup() here?
 		 */
 
+		m0 = m_pullup(m0, sizeof(uint8_t) * 3);
+		if (m0 == NULL)
+			goto next;
 		if (ng_btsocket_hci_raw_filter(pcb, m0, 1) != 0)
 			goto next;