You're not doing anything wrong. For a normal distribution, sigma specifies the standard
deviation, not the range. If you generate enough samples, you will see that only about
68% of them lie in the range [mean - sigma, mean + sigma], about 95% within 2 sigma,
and more than 99% within 3 sigma.