panic: bad dir Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 45143 10630 0 0 0 0 syz-executor * 79670 10630 0 0 0x4000000 1K syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff832e290a) at panic+0x1e5 sys/kern/subr_prf.c:198 ufs_lookup() at ufs_lookup+0x1eda VOP_LOOKUP(fffffd800b039798,ffff800037c14db0,ffff800037c14de0) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff800037c14d80) at vfs_lookup+0x93a sys/kern/vfs_lookup.c:566 namei(ffff800037c14d80) at namei+0x7ca sys/kern/vfs_lookup.c:250 vn_open(ffff800037c14d80,801,0) at vn_open+0x15a sys/kern/vfs_vnops.c:140 doopenat(ffff80002a35f4f8,ffffff9c,2000000000c0,800,0,ffff800037c14f30) at doopenat+0x35b sys/kern/vfs_syscalls.c:1138 syscall(ffff800037c14fe0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800037c14fe0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x63cb094b980, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: bad dir ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff832e290a) at panic+0x1e5 sys/kern/subr_prf.c:198 ufs_lookup() at ufs_lookup+0x1eda VOP_LOOKUP(fffffd800b039798,ffff800037c14db0,ffff800037c14de0) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff800037c14d80) at vfs_lookup+0x93a sys/kern/vfs_lookup.c:566 namei(ffff800037c14d80) at namei+0x7ca sys/kern/vfs_lookup.c:250 vn_open(ffff800037c14d80,801,0) at vn_open+0x15a sys/kern/vfs_vnops.c:140 doopenat(ffff80002a35f4f8,ffffff9c,2000000000c0,800,0,ffff800037c14f30) at doopenat+0x35b sys/kern/vfs_syscalls.c:1138 syscall(ffff800037c14fe0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800037c14fe0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x63cb094b980, count: -10 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff800037c14850 rbx 0xffff8000299eeddf rdx 0xffff80000144df40 rcx 0xffff80002a35f4f8 rax 0xffff8000299edff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xc200d6a021935b14 r11 0x436d512e2ebc33d r12 0xffff8000299eebe0 r13 0 r14 0 r15 0x1 rip 0xffffffff82a21675 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff800037c14840 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=79670 pid=10630 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=17, usrpri=86, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a35efc8,0xffffffff838fd4a8 process=0xffff800038c25830 user=0xffff800037c10000, vmspace=0xfffffd800b0273d0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 10630 45143 81569 0 7 0 syz-executor *10630 79670 81569 0 7 0x4000000 syz-executor 38420 456857 20681 0 2 0 syz-executor 38420 193033 20681 0 3 0x4000080 ttyretype syz-executor 3226 510712 34867 60929 3 0x90 fsleep syz-executor 3226 255007 34867 60929 3 0x4000090 sbwait syz-executor 17141 431147 35170 0 3 0x80 fsleep syz-executor 17141 310412 35170 0 3 0x4000080 piperd syz-executor 87867 62946 49658 0 3 0x80 fsleep syz-executor 87867 138370 49658 0 3 0x4000080 ttyin syz-executor 79416 395541 0 0 3 0x14200 acct acct 16049 514683 0 0 3 0x14280 nfsidl nfsio 29018 162121 0 0 3 0x14280 nfsidl nfsio 16047 233191 0 0 3 0x14280 nfsidl nfsio 32711 88306 0 0 3 0x14280 nfsidl nfsio 57966 189152 0 0 3 0x14280 nfsidl nfsio 16414 299588 0 0 3 0x14280 nfsidl nfsio 98514 385813 0 0 3 0x14280 nfsidl nfsio 53174 16788 0 0 3 0x14280 nfsidl nfsio 15516 149959 0 0 3 0x14280 nfsidl nfsio 27357 279599 0 0 3 0x14280 nfsidl nfsio 88522 178204 0 0 3 0x14280 nfsidl nfsio 62616 23209 0 0 3 0x14280 nfsidl nfsio 62423 343930 0 0 3 0x14280 nfsidl nfsio 1800 380398 0 0 3 0x14280 nfsidl nfsio 7819 190868 0 0 3 0x14280 nfsidl nfsio 28176 126262 0 0 3 0x14280 nfsidl nfsio 49337 111790 0 0 3 0x14280 nfsidl nfsio 25918 340718 0 0 3 0x14280 nfsidl nfsio 57713 379353 0 0 3 0x14280 nfsidl nfsio 95898 516856 0 0 3 0x14280 nfsidl nfsio 34867 378612 87069 0 2 0x2 syz-executor 45374 148802 87069 0 3 0x82 nanoslp syz-executor 29491 479497 1 0 3 0x100083 ttyin getty 80294 172751 0 0 3 0x14200 bored sosplice 47160 118600 87069 0 3 0x82 wait syz-executor 49658 342141 87069 0 3 0x82 nanoslp syz-executor 35170 471840 87069 0 2 0x2 syz-executor 79621 2810 87069 0 3 0x2 biowait syz-executor 20681 318152 87069 0 3 0x82 nanoslp syz-executor 81569 203802 87069 0 3 0x82 nanoslp syz-executor 87069 376641 57756 0 3 0x82 kqread syz-executor 57756 286883 67888 0 3 0x10008a sigsusp ksh 67888 224560 81467 0 3 0x98 kqread sshd-session 81467 348630 59083 0 3 0x92 kqread sshd-session 59083 492142 1 0 3 0x88 kqread sshd 62354 237124 50841 74 3 0x1100092 bpf pflogd 50841 181498 1 0 3 0x80 sbwait pflogd 78355 361948 98312 73 3 0x1100090 kqread syslogd 98312 123713 1 0 3 0x100082 sbwait syslogd 41955 87734 1 0 3 0x100080 kqread resolvd 98692 68549 56009 77 3 0x100092 kqread dhcpleased 7652 239089 56009 77 3 0x100092 kqread dhcpleased 56009 354673 1 0 3 0x80 kqread dhcpleased 6199 516399 0 0 3 0x14200 bored smr 68419 149725 0 0 2 0x14200 zerothread 8027 61326 0 0 3 0x14200 aiodoned aiodoned 76159 192362 0 0 3 0x14200 syncer update 92078 143261 0 0 3 0x14200 cleaner cleaner 89859 441645 0 0 3 0x14200 reaper reaper 7588 462775 0 0 3 0x14200 pgdaemon pagedaemon 32684 372456 0 0 3 0x14200 bored viomb 74199 292253 0 0 3 0x40014200 acpi0 acpi0 7035 31591 0 0 3 0x40014200 idle1 55157 281506 0 0 3 0x14200 bored softnet7 97838 234926 0 0 3 0x14200 bored softnet6 58507 199835 0 0 3 0x14200 bored softnet5 60788 316183 0 0 3 0x14200 bored softnet4 97078 14698 0 0 3 0x14200 bored softnet3 49295 62637 0 0 3 0x14200 bored softnet2 87359 414117 0 0 3 0x14200 bored softnet1 40862 474274 0 0 2 0x14200 softnet0 65737 23698 0 0 3 0x14200 bored systqmp 43377 77000 0 0 3 0x14200 bored systq 78015 143575 0 0 3 0x14200 tmoslp softclockmp 11228 145535 0 0 3 0x40014200 tmoslp softclock 80863 495896 0 0 3 0x40014200 idle0 1 483698 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 10630 (syz-executor) thread 0xffff80002a35f4f8 (79670) Process 79621 (syz-executor) thread 0xffff8000ffff3a00 (2810) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10207 11045K 12525K 166960K 12724 0 pcb 18 18K 23K 166960K 335 0 rtable 191 7K 8K 166960K 431 0 pf 34 17K 131089K 166960K 147 0 ifaddr 39 7K 8K 166960K 105 0 ifgroup 54 2K 2K 166960K 174 0 sysctl 3 1K 9K 166960K 13 0 counters 66 36K 38K 166960K 242 0 ioctlops 0 0K 4K 166960K 1782 0 iov 0 0K 32K 166960K 161 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1502 94K 95K 166960K 2345 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 53 0 dirhash 12 2K 2K 166960K 21 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 240K 166960K 1166 0 sigio 0 0K 0K 166960K 23 0 proc 72 115K 164K 166960K 698 0 subproc 72 4K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 115 0 in_multi 87 6K 7K 166960K 185 0 ether_multi 1 0K 0K 166960K 15 0 mrt 1 0K 0K 166960K 7 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 85 387K 387K 166960K 85 0 exec 0 0K 1K 166960K 613 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 35 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 231 151K 165K 166960K 11822 0 UVM aobj 19 2K 2K 166960K 21 0 pinsyscall 42 84K 102K 166960K 2288 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 104 0 NDP 11 0K 1K 166960K 69 0 temp 67 8649K 8724K 166960K 43773 0 kqueue 13 20K 32K 166960K 190 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 113 0 110 1 0 1 1 0 8 0 rtentry 176 152 0 72 5 0 5 5 0 8 0 unpcb 144 840 0 821 13 7 6 6 0 8 5 syncache 336 6 0 6 4 4 0 1 0 8 0 tcpcb 736 427 0 422 15 14 1 7 0 8 0 arp 128 17 0 8 1 0 1 1 0 8 0 inpcb 328 1280 0 1271 23 16 7 12 0 8 5 nd6 144 29 0 10 1 0 1 1 0 8 0 pkpcb 40 9 0 8 3 2 1 1 0 8 0 kcovpl 48 10 0 2 1 0 1 1 0 8 0 mppekey 1024 2 0 2 1 1 0 1 0 8 0 ppxss 1192 71 0 71 1 0 1 1 0 8 1 pppxif 1504 10 0 10 3 3 0 1 0 8 0 pffrag 232 9 0 4 1 0 1 1 0 482 0 pffrnode 88 6 0 2 1 0 1 1 0 8 0 pffrent 40 14 0 9 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 1 1 1 0 1 0 8 0 pfstitem 24 82 0 42 1 0 1 1 0 8 0 pfstkey 128 82 0 42 2 0 2 2 0 8 0 pfstate 384 81 0 42 5 0 5 5 0 8 0 pfrule 1344 31 0 25 2 1 1 2 0 8 0 rttmr 136 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 674 0 286 32 5 27 28 0 8 2 art_table 40 676 0 286 5 0 5 5 0 8 0 art_node 32 152 0 80 1 0 1 1 0 8 0 sysvmsgpl 40 42 0 2 1 0 1 1 0 8 0 semapl 112 44 0 34 1 0 1 1 0 8 0 shmpl 112 18 0 2 1 0 1 1 0 8 0 dirhash 1024 24 0 7 3 0 3 3 0 8 0 dino2pl 256 3515 0 2000 96 0 96 96 0 8 0 ffsino 296 3515 0 2000 119 2 117 118 0 8 0 nchpl 144 5154 0 3458 64 0 64 64 0 8 0 rtmask 32 10 0 10 4 3 1 1 0 8 1 uvmvnodes 80 4136 0 0 85 0 85 85 0 8 0 vnodes 216 4136 0 0 230 0 230 230 0 8 0 namei 1024 17192 0 17191 2 1 1 2 0 8 0 percpumem 16 136 0 88 1 0 1 1 0 8 0 kstatmem 264 98 0 74 5 3 2 3 0 8 0 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 scsiplug 72 3 0 3 2 2 0 1 0 8 0 scxspl 216 37092 0 37091 10 9 1 8 1 8 0 plimitpl 152 252 0 233 1 0 1 1 0 8 0 sigapl 424 1464 0 1389 9 0 9 9 0 8 0 knotepl 120 575 0 0 17 0 17 17 0 8 0 kqueuepl 224 507 0 498 8 6 2 5 0 8 1 pipepl 344 385 0 356 9 6 3 9 0 8 0 fdescpl 528 1419 0 1388 3 0 3 3 0 8 0 filepl 160 9454 0 9222 24 9 15 17 0 8 4 lockfpl 104 379 0 377 1 0 1 1 0 8 0 lockfspl 48 144 0 142 1 0 1 1 0 8 0 sessionpl 144 28 0 19 1 0 1 1 0 8 0 pgrppl 48 86 0 69 1 0 1 1 0 8 0 ucredpl 104 1377 0 1362 1 0 1 1 0 8 0 zombiepl 144 1391 0 1389 1 0 1 1 0 8 0 processpl 1232 1464 0 1389 6 0 6 6 0 8 0 procpl 664 3007 0 2927 8 0 8 8 0 8 0 sosppl 168 8 0 8 3 2 1 1 0 8 1 sockpl 752 2301 0 2268 35 23 12 17 0 8 8 mcl64k 65536 7 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 114 0 0 15 0 15 15 0 8 0 mcl2k 2048 26 0 0 4 0 4 4 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 243 0 0 14 0 14 14 0 8 0 bufpl 280 15560 0 9417 439 0 439 439 0 8 0 anonpl 32 12545 0 0 102 0 102 102 0 246 0 amapchunkpl 152 40092 0 39616 49 21 28 35 0 158 8 amappl16 200 6393 0 6349 60 45 15 26 0 8 7 amappl15 192 7 0 7 1 1 0 1 0 8 0 amappl14 184 163 0 150 1 0 1 1 0 8 0 amappl13 176 10 0 10 1 1 0 1 0 8 0 amappl12 168 2113 0 2082 3 1 2 2 0 8 0 amappl11 160 50 0 36 1 0 1 1 0 8 0 amappl10 152 6 0 6 1 1 0 1 0 8 0 amappl9 144 250 0 249 2 1 1 1 0 8 0 amappl8 136 23 0 21 1 0 1 1 0 8 0 amappl7 128 113 0 101 1 0 1 1 0 8 0 amappl6 120 200 0 196 1 0 1 1 0 8 0 amappl5 112 138 0 127 1 0 1 1 0 8 0 amappl4 104 307 0 286 1 0 1 1 0 8 0 amappl3 96 7920 0 7808 5 1 4 4 0 8 0 amappl2 88 701 0 636 2 0 2 2 0 8 0 amappl1 80 13050 0 12448 17 3 14 15 0 8 0 amappl 88 10950 0 10790 5 0 5 5 0 92 0 dma4096 4096 2 0 2 2 2 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 2 1 1 1 0 8 1 dma128 128 254 0 254 2 2 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 8 0 8 2 2 0 1 0 8 0 dma16 16 21 0 20 1 0 1 1 0 8 0 aobjpl 72 20 0 2 1 0 1 1 0 8 0 uaddrrnd 24 1419 0 1388 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1419 0 1388 1 0 1 1 0 8 0 vmmpekpl 168 13321 0 13279 3 0 3 3 0 8 0 vmmpepl 168 95453 0 93452 120 20 100 108 0 357 3 vmsppl 488 1418 0 1388 6 1 5 5 0 8 0 rwobjpl 80 32001 0 26901 109 1 108 108 0 8 2 pdppl 4096 2846 0 2776 103 30 73 86 0 8 3 pvpl 32 21080 0 0 171 1 170 170 0 265 0 pmappl 256 1418 0 1388 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 301 0 58 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83787ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 kd_curproc sys/dev/kcov.c:585 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 sys/dev/kcov.c:153 __mp_lock(ffffffff839a0500) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:134 [inline] __mp_lock(ffffffff839a0500) at __mp_lock+0x1a3 sys/kern/kern_lock.c:165 intr_handler(ffff80002ec01cb0,ffff800000079a80) at intr_handler+0xe9 sys/arch/amd64/amd64/intr.c:559 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x7656cecc0ae0, count: 8 ddb{0}> trace x86_ipi_db(ffffffff83787ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 kd_curproc sys/dev/kcov.c:585 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 sys/dev/kcov.c:153 __mp_lock(ffffffff839a0500) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:134 [inline] __mp_lock(ffffffff839a0500) at __mp_lock+0x1a3 sys/kern/kern_lock.c:165 intr_handler(ffff80002ec01cb0,ffff800000079a80) at intr_handler+0xe9 sys/arch/amd64/amd64/intr.c:559 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x7656cecc0ae0, count: -7 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff832e290a) at panic+0x1e5 sys/kern/subr_prf.c:198 ufs_lookup() at ufs_lookup+0x1eda VOP_LOOKUP(fffffd800b039798,ffff800037c14db0,ffff800037c14de0) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff800037c14d80) at vfs_lookup+0x93a sys/kern/vfs_lookup.c:566 namei(ffff800037c14d80) at namei+0x7ca sys/kern/vfs_lookup.c:250 vn_open(ffff800037c14d80,801,0) at vn_open+0x15a sys/kern/vfs_vnops.c:140 doopenat(ffff80002a35f4f8,ffffff9c,2000000000c0,800,0,ffff800037c14f30) at doopenat+0x35b sys/kern/vfs_syscalls.c:1138 syscall(ffff800037c14fe0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800037c14fe0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x63cb094b980, count: 5 ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff832e290a) at panic+0x1e5 sys/kern/subr_prf.c:198 ufs_lookup() at ufs_lookup+0x1eda VOP_LOOKUP(fffffd800b039798,ffff800037c14db0,ffff800037c14de0) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff800037c14d80) at vfs_lookup+0x93a sys/kern/vfs_lookup.c:566 namei(ffff800037c14d80) at namei+0x7ca sys/kern/vfs_lookup.c:250 vn_open(ffff800037c14d80,801,0) at vn_open+0x15a sys/kern/vfs_vnops.c:140 doopenat(ffff80002a35f4f8,ffffff9c,2000000000c0,800,0,ffff800037c14f30) at doopenat+0x35b sys/kern/vfs_syscalls.c:1138 syscall(ffff800037c14fe0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800037c14fe0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x63cb094b980, count: -10