diff --git a/hw/nvme/ctrl.c b/hw/nvme/ctrl.c
index 8b7be1420912c9a783643f7b99b6dfc10a70978c..ac24eeb5ed5ab07faf5eef2b2cc9406885d82e3a 100644
--- a/hw/nvme/ctrl.c
+++ b/hw/nvme/ctrl.c
@@ -2619,6 +2619,9 @@ static uint16_t nvme_dsm(NvmeCtrl *n, NvmeRequest *req)
         status = nvme_h2c(n, (uint8_t *)iocb->range, sizeof(NvmeDsmRange) * nr,
                           req);
         if (status) {
+            g_free(iocb->range);
+            qemu_aio_unref(iocb);
+
             return status;
         }