diff --git a/hw/femu/nvme-io.c b/hw/femu/nvme-io.c
index da236b7dbd..4a56dd6d4e 100644
--- a/hw/femu/nvme-io.c
+++ b/hw/femu/nvme-io.c
@@ -295,7 +295,7 @@ static uint16_t nvme_dsm(FemuCtrl *n, NvmeNamespace *ns, NvmeCmd *cmd,
         uint32_t nlb;
         NvmeDsmRange *range = g_malloc0(sizeof(NvmeDsmRange) * nr);
 
-        if (dma_write_prp(n, (uint8_t *)range, sizeof(range), prp1, prp2)) {
+        if (dma_write_prp(n, (uint8_t *)range, sizeof(*range), prp1, prp2)) {
             nvme_set_error_page(n, req->sq->sqid, cmd->cid, NVME_INVALID_FIELD,
                                 offsetof(NvmeCmd, dptr.prp1), 0, ns->id);
             g_free(range);