diff --git a/src/core/ipv6/icmp6.c b/src/core/ipv6/icmp6.c
index 617fca7d..4fd10216 100644
--- a/src/core/ipv6/icmp6.c
+++ b/src/core/ipv6/icmp6.c
@@ -410,7 +410,7 @@ icmp6_send_response_with_addrs_and_netif(struct pbuf *p, u8_t code, u32_t data,
   offset = sizeof(struct icmp6_hdr);
   while (p && datalen) {
     u16_t len = LWIP_MIN(datalen, p->len);
-    err_t res = pbuf_take_at(q, p->payload, datalen, offset);
+    err_t res = pbuf_take_at(q, p->payload, len, offset);
     if (res != ERR_OK) break;
     datalen -= len;
     offset += len;