uvm_fault(0xffffffff83960288, 0xffff8000014d308a, 0, 1) -> e kernel: page fault trap, code=0 Stopped at arp_rtrequest+0x66f: movzwl 0xc(%r15,%rbx,1),%ecx TID PID UID PRFLAGS PFLAGS CPU COMMAND * 48263 58330 0 0 0x4000000 1 syz-executor 338119 19419 -1 0x10 0 0 syz-executor arp_rtrequest(ffff800000039058,1,fffffd806985de90) at arp_rtrequest+0x66f arprequest sys/netinet/if_ether.c:281 [inline] arp_rtrequest(ffff800000039058,1,fffffd806985de90) at arp_rtrequest+0x66f sys/netinet/if_ether.c:184 rtrequest(1,ffff80002ebd28f0,0,ffff80002ebd2870,0) at rtrequest+0xc5c sys/net/route.c:1117 rtm_output(ffff80000149ad00,ffff80002ebd2998,ffff80002ebd28f0,0,0) at rtm_output+0x876 sys/net/rtsock.c:973 route_output(fffffd8078b33100,ffff8000014aa018) at route_output+0x9a1 sys/net/rtsock.c:878 route_send(ffff8000014aa018,fffffd8078b33100,0,0) at route_send+0xd7 sys/net/rtsock.c:342 sosend(ffff8000014aa018,0,ffff80002ebd2b38,0,0,808) at sosend+0x804 sys/kern/uipc_socket.c:-1 sendit(ffff8000ffff14a8,3,ffff80002ebd2c30,808,ffff80002ebd2ce0) at sendit+0x721 sys/kern/uipc_syscalls.c:779 sys_sendto(ffff8000ffff14a8,ffff80002ebd2d90,ffff80002ebd2ce0) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:557 syscall(ffff80002ebd2d90) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002ebd2d90) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb317ff08520, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xffffffff83960288, 0xffff8000014d308a, 0, 1) -> e ddb{1}> trace arp_rtrequest(ffff800000039058,1,fffffd806985de90) at arp_rtrequest+0x66f arprequest sys/netinet/if_ether.c:281 [inline] arp_rtrequest(ffff800000039058,1,fffffd806985de90) at arp_rtrequest+0x66f sys/netinet/if_ether.c:184 rtrequest(1,ffff80002ebd28f0,0,ffff80002ebd2870,0) at rtrequest+0xc5c sys/net/route.c:1117 rtm_output(ffff80000149ad00,ffff80002ebd2998,ffff80002ebd28f0,0,0) at rtm_output+0x876 sys/net/rtsock.c:973 route_output(fffffd8078b33100,ffff8000014aa018) at route_output+0x9a1 sys/net/rtsock.c:878 route_send(ffff8000014aa018,fffffd8078b33100,0,0) at route_send+0xd7 sys/net/rtsock.c:342 sosend(ffff8000014aa018,0,ffff80002ebd2b38,0,0,808) at sosend+0x804 sys/kern/uipc_socket.c:-1 sendit(ffff8000ffff14a8,3,ffff80002ebd2c30,808,ffff80002ebd2ce0) at sendit+0x721 sys/kern/uipc_syscalls.c:779 sys_sendto(ffff8000ffff14a8,ffff80002ebd2d90,ffff80002ebd2ce0) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:557 syscall(ffff80002ebd2d90) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002ebd2d90) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb317ff08520, count: -10 ddb{1}> show registers rdi 0xffff80003a009000 rsi 0x8de rbp 0xffff80002ebd2740 rbx 0xde rdx 0xffff80003a009000 rcx 0x100040600080100 rax 0xfffffd806ecd77e0 r8 0x10 r9 0xfffffd806985de90 r10 0x55eed4a3701417e4 r11 0xb6d624b31a32b96a r12 0x19 r13 0xfffffd806ecd7700 r14 0xfffffd806985de90 r15 0xffff8000014d2fa0 rip 0xffffffff812c2c0f arp_rtrequest+0x66f cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002ebd26c0 ss 0x10 arp_rtrequest+0x66f: movzwl 0xc(%r15,%rbx,1),%ecx ddb{1}> show proc PROC (syz-executor) tid=48263 pid=58330 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffff0f88,0xffffffff83922ad8 process=0xffff8000fffe6bb8 user=0xffff80002ebcd000, vmspace=0xfffffd806c1b21f8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 6961 230167 2949 0 2 0 syz-executor 58330 352724 35132 0 2 0 syz-executor *58330 48263 35132 0 7 0x4000000 syz-executor 57635 336297 84318 0 2 0 syz-executor 57635 18423 84318 0 3 0x4000080 fsleep syz-executor 58534 129138 67627 0 2 0 syz-executor 58534 172520 67627 0 3 0x4000080 pipewr syz-executor 45021 329941 39335 0 2 0 syz-executor 45021 393228 39335 0 3 0x4000080 fsleep syz-executor 19419 338119 15177 -1 7 0x10 syz-executor 19419 164378 15177 -1 3 0x4000090 kqsel syz-executor 19419 234901 15177 -1 3 0x4000090 fsleep syz-executor 28291 162941 54243 0 3 0x100082 sbwait ndp 54243 500929 8255 0 3 0x10008a sigsusp sh 35132 520593 41867 0 3 0x82 nanoslp syz-executor 51021 467569 41867 0 3 0x82 nanoslp syz-executor 2949 41006 41867 0 3 0x82 nanoslp syz-executor 15177 21168 41867 0 2 0xc82 syz-executor 84318 471903 41867 0 2 0xc82 syz-executor 67627 182053 41867 0 3 0x82 nanoslp syz-executor 39335 509553 41867 0 3 0x82 nanoslp syz-executor 8255 488127 41867 0 3 0x82 wait syz-executor 41867 385698 91250 0 3 0x82 kqread syz-executor 91250 291115 11024 0 3 0x10008a sigsusp ksh 11024 270041 54557 0 3 0x98 kqread sshd-session 54557 417932 19603 0 3 0x92 kqread sshd-session 81103 49730 1 0 3 0x100083 ttyin getty 19603 443742 1 0 3 0x88 kqread sshd 37487 492181 49380 74 3 0x1100092 bpf pflogd 49380 373625 1 0 3 0x80 sbwait pflogd 91462 211001 68529 73 3 0x1100090 kqread syslogd 68529 268659 1 0 3 0x100082 sbwait syslogd 62002 154439 1 0 3 0x100080 kqread resolvd 83255 291955 18684 77 3 0x100092 kqread dhcpleased 72529 470634 18684 77 3 0x100092 kqread dhcpleased 18684 280021 1 0 3 0x80 kqread dhcpleased 91627 133813 0 0 3 0x14200 bored smr 34986 27525 0 0 2 0x14200 zerothread 72080 95419 0 0 3 0x14200 aiodoned aiodoned 180 424959 0 0 3 0x14200 syncer update 93139 373548 0 0 3 0x14200 cleaner cleaner 16460 43484 0 0 3 0x14200 reaper reaper 21845 291129 0 0 3 0x14200 pgdaemon pagedaemon 99477 293969 0 0 3 0x14200 bored viomb 80619 17105 0 0 3 0x40014200 acpi0 acpi0 67323 477933 0 0 3 0x40014200 idle1 60348 135886 0 0 3 0x14200 bored softnet3 60364 322253 0 0 3 0x14200 bored softnet2 5942 67183 0 0 3 0x14200 bored softnet1 20267 133742 0 0 3 0x14200 bored softnet0 18557 365306 0 0 2 0x14200 systqmp 38579 49363 0 0 3 0x14200 bored systq 38180 62640 0 0 3 0x14200 tmoslp softclockmp 23972 143360 0 0 3 0x40014200 tmoslp softclock 40911 207674 0 0 3 0x40014200 idle0 1 117561 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 58330 (syz-executor) thread 0xffff8000ffff14a8 (48263) exclusive rwlock netlock r = 0 (0xffffffff83808120) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x377 sys/kern/kern_rwlock.c:310 #2 rtm_output+0x78c sys/net/rtsock.c:969 #3 route_output+0x9a1 sys/net/rtsock.c:878 #4 route_send+0xd7 sys/net/rtsock.c:342 #5 sosend+0x804 sys/kern/uipc_socket.c:-1 #6 sendit+0x721 sys/kern/uipc_syscalls.c:779 #7 sys_sendto+0x8d sys/kern/uipc_syscalls.c:557 #8 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579 #9 Xsyscall+0x128 exclusive rwlock sbufsnd r = 0 (0xffff8000014aa1f0) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x377 sys/kern/kern_rwlock.c:310 #2 sblock+0xb7 sys/kern/uipc_socket2.c:536 #3 sosend+0x2e2 sys/kern/uipc_socket.c:630 #4 sendit+0x721 sys/kern/uipc_syscalls.c:779 #5 sys_sendto+0x8d sys/kern/uipc_syscalls.c:557 #6 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] #6 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10197 11086K 11281K 166960K 11314 0 pcb 17 12K 12K 166960K 18 0 rtable 235 6K 6K 166960K 354 0 pf 36 18K 18K 166960K 47 0 ifaddr 43 7K 7K 166960K 45 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 3 1K 9K 166960K 7 0 counters 68 36K 36K 166960K 68 0 ioctlops 0 0K 4K 166960K 1489 0 iov 0 0K 12K 166960K 4 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1340 84K 84K 166960K 1376 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 5 0K 0K 166960K 6 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 19 69K 93K 166960K 162 0 proc 71 91K 115K 166960K 533 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 1 0 in_multi 99 7K 7K 166960K 101 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 43 201K 201K 166960K 43 0 exec 0 0K 1K 166960K 373 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 240 162K 172K 166960K 3174 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 45 90K 108K 166960K 1270 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 26 1K 2K 166960K 28 0 temp 35 8682K 8746K 166960K 4165 0 kqueue 13 20K 24K 166960K 26 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 38 0 33 1 0 1 1 0 8 0 rtentry 176 111 0 1 5 0 5 5 0 8 0 unpcb 144 43 0 22 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 13 0 9 1 0 1 1 0 8 0 arp 128 18 0 0 1 0 1 1 0 8 0 inpcb 328 74 0 67 1 0 1 1 0 8 0 nd6 144 23 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfstscr 40 1 0 1 1 0 1 1 0 8 1 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 18 0 0 1 0 1 1 0 8 0 pfstkey 128 19 0 1 1 0 1 1 0 8 0 pfstate 384 19 0 1 2 0 2 2 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 32 453 0 0 4 0 4 4 0 8 0 art_node 16 110 0 10 1 0 1 1 0 8 0 semapl 112 3 0 0 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1598 0 87 95 0 95 95 0 8 0 ffsino 288 1598 0 87 109 0 109 109 0 8 0 nchpl 144 1823 0 137 63 0 63 63 0 8 0 uvmvnodes 80 1700 0 0 35 0 35 35 0 8 0 vnodes 216 1700 0 0 95 0 95 95 0 8 0 namei 1024 5776 0 5776 1 0 1 1 0 8 1 percpumem 16 49 0 0 1 0 1 1 0 8 0 kstatmem 264 26 0 0 2 0 2 2 0 8 0 scxspl 216 6113 0 6113 3 1 2 2 1 8 2 plimitpl 152 30 0 13 1 0 1 1 0 8 0 sigapl 424 469 0 418 8 1 7 7 0 8 0 knotepl 120 305 0 0 10 0 10 10 0 8 0 kqueuepl 224 25 0 15 1 0 1 1 0 8 0 pipepl 336 106 0 78 3 0 3 3 0 8 0 fdescpl 520 451 0 418 3 0 3 3 0 8 0 filepl 160 1743 0 1522 11 0 11 11 0 8 1 lockfpl 104 20 0 17 1 0 1 1 0 8 0 lockfspl 48 10 0 7 1 0 1 1 0 8 0 sessionpl 144 22 0 13 1 0 1 1 0 8 0 pgrppl 48 33 0 16 1 0 1 1 0 8 0 ucredpl 104 88 0 74 1 0 1 1 0 8 0 zombiepl 144 419 0 418 1 0 1 1 0 8 0 processpl 1240 469 0 418 5 0 5 5 0 8 0 procpl 656 528 0 471 7 1 6 6 0 8 0 sockpl 728 156 0 123 4 0 4 4 0 8 0 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 122 0 0 16 0 16 16 0 8 0 mcl2k 2048 27 0 0 4 0 4 4 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 218 0 0 14 0 14 14 0 8 0 bufpl 280 2450 0 122 167 0 167 167 0 8 0 anonpl 32 5951 0 0 48 0 48 48 0 246 0 amapchunkpl 152 9191 0 8596 27 0 27 27 0 158 2 amappl16 200 2024 0 2002 5 0 5 5 0 8 3 amappl15 192 1 0 1 1 0 1 1 0 8 1 amappl14 184 114 0 101 1 0 1 1 0 8 0 amappl13 176 6 0 5 1 0 1 1 0 8 0 amappl12 168 1106 0 1073 4 1 3 3 0 8 1 amappl11 160 53 0 39 1 0 1 1 0 8 0 amappl10 152 6 0 6 1 0 1 1 0 8 1 amappl9 144 254 0 254 1 0 1 1 0 8 1 amappl8 136 24 0 22 1 0 1 1 0 8 0 amappl7 128 112 0 99 1 0 1 1 0 8 0 amappl6 120 177 0 172 1 0 1 1 0 8 0 amappl5 112 120 0 110 1 0 1 1 0 8 0 amappl4 104 314 0 294 1 0 1 1 0 8 0 amappl3 96 1446 0 1337 5 1 4 4 0 8 0 amappl2 88 640 0 579 2 0 2 2 0 8 0 amappl1 80 8434 0 7796 16 0 16 16 0 8 1 amappl 88 2483 0 2321 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 451 0 418 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 451 0 418 1 0 1 1 0 8 0 vmmpekpl 168 5423 0 5387 2 0 2 2 0 8 0 vmmpepl 168 35493 0 33467 94 0 94 94 0 357 4 vmsppl 480 450 0 418 5 0 5 5 0 8 0 rwobjpl 72 14570 0 11909 51 0 51 51 0 8 0 pdppl 4096 909 0 836 99 14 85 85 0 8 12 pvpl 32 13705 0 0 112 1 111 111 0 265 0 pmappl 256 450 0 418 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 385 0 16 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff838c7ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 Xsyscall() at Xsyscall+0x111 end of kernel end trace frame: 0x7e655dd180a0, count: 11 ddb{0}> trace x86_ipi_db(ffffffff838c7ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 Xsyscall() at Xsyscall+0x111 end of kernel end trace frame: 0x7e655dd180a0, count: -4 ddb{0}> machine ddbcpu 1 Stopped at arp_rtrequest+0x66f: movzwl 0xc(%r15,%rbx,1),%ecx arp_rtrequest(ffff800000039058,1,fffffd806985de90) at arp_rtrequest+0x66f arprequest sys/netinet/if_ether.c:281 [inline] arp_rtrequest(ffff800000039058,1,fffffd806985de90) at arp_rtrequest+0x66f sys/netinet/if_ether.c:184 rtrequest(1,ffff80002ebd28f0,0,ffff80002ebd2870,0) at rtrequest+0xc5c sys/net/route.c:1117 rtm_output(ffff80000149ad00,ffff80002ebd2998,ffff80002ebd28f0,0,0) at rtm_output+0x876 sys/net/rtsock.c:973 route_output(fffffd8078b33100,ffff8000014aa018) at route_output+0x9a1 sys/net/rtsock.c:878 route_send(ffff8000014aa018,fffffd8078b33100,0,0) at route_send+0xd7 sys/net/rtsock.c:342 sosend(ffff8000014aa018,0,ffff80002ebd2b38,0,0,808) at sosend+0x804 sys/kern/uipc_socket.c:-1 sendit(ffff8000ffff14a8,3,ffff80002ebd2c30,808,ffff80002ebd2ce0) at sendit+0x721 sys/kern/uipc_syscalls.c:779 sys_sendto(ffff8000ffff14a8,ffff80002ebd2d90,ffff80002ebd2ce0) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:557 syscall(ffff80002ebd2d90) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002ebd2d90) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb317ff08520, count: 5 ddb{1}> trace arp_rtrequest(ffff800000039058,1,fffffd806985de90) at arp_rtrequest+0x66f arprequest sys/netinet/if_ether.c:281 [inline] arp_rtrequest(ffff800000039058,1,fffffd806985de90) at arp_rtrequest+0x66f sys/netinet/if_ether.c:184 rtrequest(1,ffff80002ebd28f0,0,ffff80002ebd2870,0) at rtrequest+0xc5c sys/net/route.c:1117 rtm_output(ffff80000149ad00,ffff80002ebd2998,ffff80002ebd28f0,0,0) at rtm_output+0x876 sys/net/rtsock.c:973 route_output(fffffd8078b33100,ffff8000014aa018) at route_output+0x9a1 sys/net/rtsock.c:878 route_send(ffff8000014aa018,fffffd8078b33100,0,0) at route_send+0xd7 sys/net/rtsock.c:342 sosend(ffff8000014aa018,0,ffff80002ebd2b38,0,0,808) at sosend+0x804 sys/kern/uipc_socket.c:-1 sendit(ffff8000ffff14a8,3,ffff80002ebd2c30,808,ffff80002ebd2ce0) at sendit+0x721 sys/kern/uipc_syscalls.c:779 sys_sendto(ffff8000ffff14a8,ffff80002ebd2d90,ffff80002ebd2ce0) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:557 syscall(ffff80002ebd2d90) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002ebd2d90) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb317ff08520, count: -10