500 errors in OTP implementation using speakeasy in EJS - node.js

Question

The OTP function is being implemented using the package.
Current environments include: Express.js, SQL, MariaDB, EJS
When logging in using speakeasy, I will receive the OTP number together, and if there is no problem, I will log in and redirect it to the main page.
It is impossible to change in that technology because it only adds new functions of existing services.
The point where the current problem occurs is that the OTP code changes every certain time, but when you click login, it does not proceed by outputting otp is not defined.
ReferenceError: /Users/Desktop/otpsql/views/otp.ejs:17
15| <input type="password" id="password" name="password" required><br>
16| <label for="otp">OTP</label>
>> 17| <p><%= otp %></p>
18| <input type="text" id="otp" name="otp" required><br>
19| <button type="submit">Login</button>
20| </form>
otp is not defined
If the otp number is not printed at all, I understand that I wrote the wrong code, but if I enter username, password, and otp and click the submit button, that error occurs, so I don't know what the problem is.
Among the files I wrote, the part of the file that displays the error message is as follows.
at eval ("/Users/Desktop/otpsql/views/otp.ejs":12:26)
<form action="/otp" method="post">
<label for="username">username</label> <<< line 12
<input type="text" id="username" name="username" required><br>
<label for="password">Password</label>
<input type="password" id="password" name="password" required><br>
<label for="otp">OTP</label>
<p><%= otp %></p>
<input type="text" id="otp" name="otp" required><br>
<button type="submit">Login</button>
</form>
at /Users/Desktop/otpsql/Router/otp.js:66:9
router.post('/', async (req, res, next) => {
const user = await query('SELECT * FROM users WHERE username = ?', [req.params.username]);
if (user.length > 0) {
const isPasswordValid = user[0].password === req.body.password;
const otpSecret = await query('SELECT otp_secret FROM otp_secrets WHERE user_id = ?', [user[0].id]);
if (isPasswordValid && speakeasy.totp.verify({
secret: otpSecret[0].otp_secret,
encoding: 'base32',
token: req.body.otpCode,
window: 1
})) {
req.session.userId = user[0].id;
res.redirect('/');
} else {
res.render('otp', { error: 'Invalid username, password, or OTP' });
}
} else {
res.render('otp', { error: 'Invalid username, password, or OTP' });
} <<< line 66
});
What code should I modify in that part?