diff --git a/core/dp/htt/htt_t2h.c b/core/dp/htt/htt_t2h.c
index 626fb514a778..7daa1fbf758f 100644
--- a/core/dp/htt/htt_t2h.c
+++ b/core/dp/htt/htt_t2h.c
@@ -512,10 +512,14 @@ static void htt_t2h_lp_msg_handler(void *context, qdf_nbuf_t htt_t2h_msg,
 	{
 		uint16_t len;
 		int msg_len = qdf_nbuf_len(htt_t2h_msg);
-		len = HTT_WDI_IPA_OP_RESPONSE_RSP_LEN_GET(*msg_word);
+		len = HTT_WDI_IPA_OP_RESPONSE_RSP_LEN_GET(*(msg_word + 1));
 
 		if (sizeof(struct htt_wdi_ipa_op_response_t) + len > msg_len) {
-			qdf_print("Invalid buffer length");
+			qdf_print("Invalid buffer length,"
+				"sizeof(struct htt_wdi_ipa_op_response_t) %lu"
+				"len %d, msg_len %d",
+				sizeof(struct htt_wdi_ipa_op_response_t),
+				len, msg_len);
 			WARN_ON(1);
 			break;
 		}