--- at91_spi.c	(revision 192715)
+++ at91_spi.c	(local)
@@ -229,7 +229,7 @@
 		mode[i++] = BUS_DMASYNC_POSTWRITE;
 	}
 	if (bus_dmamap_load(sc->dmatag, sc->map[i], cmd->rx_cmd,
-	    cmd->tx_cmd_sz, at91_getaddr, &addr, 0) != 0)
+	    cmd->rx_cmd_sz, at91_getaddr, &addr, 0) != 0)
 		goto out;
 	WR4(sc, PDC_RPR, addr);
 	WR4(sc, PDC_RCR, cmd->tx_cmd_sz);
@@ -237,7 +237,7 @@
 	mode[i++] = BUS_DMASYNC_POSTREAD;
 	if (cmd->rx_data_sz > 0) {
 		if (bus_dmamap_load(sc->dmatag, sc->map[i], cmd->rx_data,
-			cmd->tx_data_sz, at91_getaddr, &addr, 0) != 0)
+			cmd->rx_data_sz, at91_getaddr, &addr, 0) != 0)
 			goto out;
 		WR4(sc, PDC_RNPR, addr);
 		WR4(sc, PDC_RNCR, cmd->rx_data_sz);