./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1353680188 <...> Warning: Permanently added '10.128.1.65' (ED25519) to the list of known hosts. execve("./syz-executor1353680188", ["./syz-executor1353680188"], 0x7ffedaa63200 /* 10 vars */) = 0 brk(NULL) = 0x55555abdc000 brk(0x55555abdcd00) = 0x55555abdcd00 arch_prctl(ARCH_SET_FS, 0x55555abdc380) = 0 set_tid_address(0x55555abdc650) = 5220 set_robust_list(0x55555abdc660, 24) = 0 rseq(0x55555abdcca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1353680188", 4096) = 28 getrandom("\x41\x88\x8a\x0c\xdb\x7e\x76\x2e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555abdcd00 brk(0x55555abfdd00) = 0x55555abfdd00 brk(0x55555abfe000) = 0x55555abfe000 mprotect(0x7f6618bf4000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.2JxSAQ", 0700) = 0 chmod("./syzkaller.2JxSAQ", 0777) = 0 chdir("./syzkaller.2JxSAQ") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5221 attached , child_tidptr=0x55555abdc650) = 5221 [pid 5221] set_robust_list(0x55555abdc660, 24) = 0 [pid 5221] chdir("./0") = 0 [pid 5221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5221] setpgid(0, 0) = 0 [pid 5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5221] write(3, "1000", 4) = 4 [pid 5221] close(3) = 0 [pid 5221] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5221] write(1, "executing program\n", 18executing program ) = 18 [pid 5221] memfd_create("syzkaller", 0) = 3 [pid 5221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6610600000 [pid 5221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5221] munmap(0x7f6610600000, 138412032) = 0 [pid 5221] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5221] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5221] close(3) = 0 [pid 5221] close(4) = 0 [pid 5221] mkdir("./file0", 0777) = 0 [ 82.919030][ T5221] loop0: detected capacity change from 0 to 32768 [ 82.955597][ T5221] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor135 (5221) [ 82.989173][ T5221] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 83.009129][ T5221] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 83.021622][ T5221] BTRFS info (device loop0): using free-space-tree [pid 5221] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_NODEV|MS_SYNCHRONOUS, "") = 0 [pid 5221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5221] chdir("./file0") = 0 [pid 5221] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5221] ioctl(4, LOOP_CLR_FD) = 0 [pid 5221] close(4) = 0 [pid 5221] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 83.166732][ T29] audit: type=1800 audit(1722431078.202:2): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor135" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 83.195115][ T5221] [ 83.197499][ T5221] ===================================== [ 83.203133][ T5221] WARNING: bad unlock balance detected! [ 83.208679][ T5221] 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 Not tainted [ 83.216061][ T5221] ------------------------------------- [ 83.221629][ T5221] syz-executor135/5221 is trying to release lock (&sb->s_type->i_mutex_key) at: [ 83.230674][ T5221] [] btrfs_direct_write+0x91f/0xb40 [ 83.237665][ T5221] but there are no more locks to release! [ 83.243498][ T5221] [ 83.243498][ T5221] other info that might help us debug this: [ 83.251837][ T5221] 1 lock held by syz-executor135/5221: [ 83.257395][ T5221] #0: ffff888028850420 (sb_writers#9){.+.+}-{0:0}, at: vfs_writev+0x2d4/0xbb0 [ 83.266611][ T5221] [ 83.266611][ T5221] stack backtrace: [ 83.272645][ T5221] CPU: 0 UID: 0 PID: 5221 Comm: syz-executor135 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 83.283946][ T5221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 83.294202][ T5221] Call Trace: [ 83.297490][ T5221] [ 83.300427][ T5221] dump_stack_lvl+0x241/0x360 [ 83.305134][ T5221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.310382][ T5221] ? __pfx__printk+0x10/0x10 [ 83.314992][ T5221] ? btrfs_direct_write+0x91f/0xb40 [ 83.320212][ T5221] print_unlock_imbalance_bug+0x256/0x2c0 [ 83.326037][ T5221] ? __pfx_print_unlock_imbalance_bug+0x10/0x10 [ 83.332317][ T5221] lock_release+0x5cb/0xa30 [ 83.337125][ T5221] ? mark_lock+0x9a/0x350 [ 83.341562][ T5221] ? btrfs_direct_write+0x91f/0xb40 [ 83.346879][ T5221] ? __pfx_lock_release+0x10/0x10 [ 83.352041][ T5221] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.358175][ T5221] ? kasan_quarantine_put+0xdc/0x230 [ 83.364533][ T5221] up_write+0x79/0x590 [ 83.368977][ T5221] ? iomap_dio_complete+0x6a9/0x960 [ 83.374398][ T5221] ? kfree+0x149/0x360 [ 83.378694][ T5221] ? __pfx_up_write+0x10/0x10 [ 83.383665][ T5221] ? iomap_dio_complete+0x6a9/0x960 [ 83.389019][ T5221] btrfs_direct_write+0x91f/0xb40 [ 83.394179][ T5221] ? __pfx_btrfs_direct_write+0x10/0x10 [ 83.399776][ T5221] ? mark_lock+0x9a/0x350 [ 83.404146][ T5221] ? __lock_acquire+0x137a/0x2040 [ 83.409317][ T5221] btrfs_do_write_iter+0x2a1/0x760 [ 83.415192][ T5221] ? mark_lock+0x9a/0x350 [ 83.420654][ T5221] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 83.426581][ T5221] do_iter_readv_writev+0x60a/0x890 [ 83.432636][ T5221] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 83.438729][ T5221] ? rcu_read_lock_any_held+0xb7/0x160 [ 83.444286][ T5221] vfs_writev+0x37c/0xbb0 [ 83.448771][ T5221] ? __pfx_vfs_writev+0x10/0x10 [ 83.453952][ T5221] ? _raw_spin_unlock_irq+0x2e/0x50 [ 83.459378][ T5221] ? ptrace_notify+0x279/0x380 [ 83.464261][ T5221] __se_sys_pwritev2+0x1ca/0x2d0 [ 83.469938][ T5221] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 83.475866][ T5221] ? exc_page_fault+0x590/0x8c0 [ 83.481113][ T5221] ? __x64_sys_pwritev2+0x21/0xf0 [ 83.486187][ T5221] do_syscall_64+0xf3/0x230 [ 83.490844][ T5221] ? clear_bhb_loop+0x35/0x90 [ 83.495544][ T5221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.501494][ T5221] RIP: 0033:0x7f6618b7b169 [ 83.505957][ T5221] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 83.526388][ T5221] RSP: 002b:00007fffaef68648 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 83.535541][ T5221] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6618b7b169 [ 83.543996][ T5221] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 83.552532][ T5221] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000003 [ 83.560898][ T5221] R10: 0000000000007000 R11: 0000000000000246 R12: 00007fffaef686a0 [ 83.569953][ T5221] R13: 00007fffaef686e0 R14: 0000000001000000 R15: 0000000000000003 [ 83.578319][ T5221] [ 83.582600][ T5221] ------------[ cut here ]------------ [ 83.588100][ T5221] DEBUG_RWSEMS_WARN_ON((rwsem_owner(sem) != current) && !rwsem_test_oflags(sem, RWSEM_NONSPINNABLE)): count = 0x0, magic = 0xffff888078650d20, owner = 0x0, curr 0xffff888028829e00, list empty [ 83.607724][ T5221] WARNING: CPU: 0 PID: 5221 at kernel/locking/rwsem.c:1370 up_write+0x502/0x590 [ 83.617450][ T5221] Modules linked in: [ 83.621605][ T5221] CPU: 0 UID: 0 PID: 5221 Comm: syz-executor135 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 83.632929][ T5221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 83.645110][ T5221] RIP: 0010:up_write+0x502/0x590 [ 83.650288][ T5221] Code: c7 c7 a0 c8 ea 8b 48 c7 c6 20 cb ea 8b 48 8b 54 24 28 48 8b 4c 24 18 4d 89 e0 4c 8b 4c 24 30 53 e8 d3 9c e6 ff 48 83 c4 08 90 <0f> 0b 90 90 e9 6a fd ff ff 48 c7 c1 00 a9 f6 8f 80 e1 07 80 c1 03 [ 83.671857][ T5221] RSP: 0018:ffffc9000397f760 EFLAGS: 00010296 [ 83.677963][ T5221] RAX: eb32d61e128a8c00 RBX: ffffffff8beac980 RCX: ffff888028829e00 [ 83.686216][ T5221] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 83.694273][ T5221] RBP: ffffc9000397f830 R08: ffffffff81559202 R09: 1ffff9200072fe8c [ 83.702520][ T5221] R10: dffffc0000000000 R11: fffff5200072fe8d R12: 0000000000000000 [ 83.710951][ T5221] R13: ffff888078650d20 R14: 1ffff9200072fef4 R15: dffffc0000000000 [ 83.719271][ T5221] FS: 000055555abdc380(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 83.728239][ T5221] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.735123][ T5221] CR2: 0000563f2ebb80a8 CR3: 0000000075f9c000 CR4: 00000000003506f0 [ 83.743186][ T5221] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.751263][ T5221] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.759323][ T5221] Call Trace: [ 83.762640][ T5221] [ 83.765715][ T5221] ? __warn+0x163/0x4e0 [ 83.769986][ T5221] ? up_write+0x502/0x590 [ 83.774448][ T5221] ? report_bug+0x2b3/0x500 [ 83.779022][ T5221] ? up_write+0x502/0x590 [ 83.783407][ T5221] ? handle_bug+0x3e/0x70 [ 83.787797][ T5221] ? exc_invalid_op+0x1a/0x50 [ 83.792578][ T5221] ? asm_exc_invalid_op+0x1a/0x20 [ 83.797643][ T5221] ? __warn_printk+0x292/0x360 [ 83.802465][ T5221] ? up_write+0x502/0x590 [ 83.806825][ T5221] ? __pfx_up_write+0x10/0x10 [ 83.811590][ T5221] ? iomap_dio_complete+0x6a9/0x960 [ 83.816921][ T5221] btrfs_direct_write+0x91f/0xb40 [ 83.822046][ T5221] ? __pfx_btrfs_direct_write+0x10/0x10 [ 83.827630][ T5221] ? mark_lock+0x9a/0x350 [ 83.832138][ T5221] ? __lock_acquire+0x137a/0x2040 [ 83.837220][ T5221] btrfs_do_write_iter+0x2a1/0x760 [ 83.842449][ T5221] ? mark_lock+0x9a/0x350 [ 83.847007][ T5221] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 83.852807][ T5221] do_iter_readv_writev+0x60a/0x890 [ 83.858164][ T5221] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 83.863992][ T5221] ? rcu_read_lock_any_held+0xb7/0x160 [ 83.869599][ T5221] vfs_writev+0x37c/0xbb0 [ 83.874937][ T5221] ? __pfx_vfs_writev+0x10/0x10 [ 83.880096][ T5221] ? _raw_spin_unlock_irq+0x2e/0x50 [ 83.885363][ T5221] ? ptrace_notify+0x279/0x380 [ 83.890215][ T5221] __se_sys_pwritev2+0x1ca/0x2d0 [ 83.895200][ T5221] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 83.901241][ T5221] ? exc_page_fault+0x590/0x8c0 [ 83.906216][ T5221] ? __x64_sys_pwritev2+0x21/0xf0 [ 83.911505][ T5221] do_syscall_64+0xf3/0x230 [ 83.916417][ T5221] ? clear_bhb_loop+0x35/0x90 [ 83.921178][ T5221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.927387][ T5221] RIP: 0033:0x7f6618b7b169 [ 83.932129][ T5221] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 83.953061][ T5221] RSP: 002b:00007fffaef68648 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 83.961945][ T5221] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6618b7b169 [ 83.970141][ T5221] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 83.978221][ T5221] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000003 [ 83.986626][ T5221] R10: 0000000000007000 R11: 0000000000000246 R12: 00007fffaef686a0 [ 83.995308][ T5221] R13: 00007fffaef686e0 R14: 0000000001000000 R15: 0000000000000003 [ 84.003367][ T5221] [ 84.006474][ T5221] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 84.013880][ T5221] CPU: 0 UID: 0 PID: 5221 Comm: syz-executor135 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 84.025042][ T5221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 84.035717][ T5221] Call Trace: [ 84.039023][ T5221] [ 84.041970][ T5221] dump_stack_lvl+0x241/0x360 [ 84.046700][ T5221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.051928][ T5221] ? __pfx__printk+0x10/0x10 [ 84.056532][ T5221] ? vscnprintf+0x5d/0x90 [ 84.060883][ T5221] panic+0x349/0x860 [ 84.065498][ T5221] ? __warn+0x172/0x4e0 [ 84.069867][ T5221] ? __pfx_panic+0x10/0x10 [ 84.074411][ T5221] __warn+0x346/0x4e0 [ 84.078435][ T5221] ? up_write+0x502/0x590 [ 84.082889][ T5221] report_bug+0x2b3/0x500 [ 84.087556][ T5221] ? up_write+0x502/0x590 [ 84.092282][ T5221] handle_bug+0x3e/0x70 [ 84.096501][ T5221] exc_invalid_op+0x1a/0x50 [ 84.101091][ T5221] asm_exc_invalid_op+0x1a/0x20 [ 84.106114][ T5221] RIP: 0010:up_write+0x502/0x590 [ 84.111088][ T5221] Code: c7 c7 a0 c8 ea 8b 48 c7 c6 20 cb ea 8b 48 8b 54 24 28 48 8b 4c 24 18 4d 89 e0 4c 8b 4c 24 30 53 e8 d3 9c e6 ff 48 83 c4 08 90 <0f> 0b 90 90 e9 6a fd ff ff 48 c7 c1 00 a9 f6 8f 80 e1 07 80 c1 03 [ 84.130812][ T5221] RSP: 0018:ffffc9000397f760 EFLAGS: 00010296 [ 84.136957][ T5221] RAX: eb32d61e128a8c00 RBX: ffffffff8beac980 RCX: ffff888028829e00 [ 84.145083][ T5221] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 84.153191][ T5221] RBP: ffffc9000397f830 R08: ffffffff81559202 R09: 1ffff9200072fe8c [ 84.161218][ T5221] R10: dffffc0000000000 R11: fffff5200072fe8d R12: 0000000000000000 [ 84.169209][ T5221] R13: ffff888078650d20 R14: 1ffff9200072fef4 R15: dffffc0000000000 [ 84.177217][ T5221] ? __warn_printk+0x292/0x360 [ 84.182012][ T5221] ? __pfx_up_write+0x10/0x10 [ 84.186809][ T5221] ? iomap_dio_complete+0x6a9/0x960 [ 84.192027][ T5221] btrfs_direct_write+0x91f/0xb40 [ 84.197077][ T5221] ? __pfx_btrfs_direct_write+0x10/0x10 [ 84.202641][ T5221] ? mark_lock+0x9a/0x350 [ 84.207013][ T5221] ? __lock_acquire+0x137a/0x2040 [ 84.212079][ T5221] btrfs_do_write_iter+0x2a1/0x760 [ 84.217218][ T5221] ? mark_lock+0x9a/0x350 [ 84.221572][ T5221] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 84.227237][ T5221] do_iter_readv_writev+0x60a/0x890 [ 84.232522][ T5221] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 84.238250][ T5221] ? rcu_read_lock_any_held+0xb7/0x160 [ 84.243764][ T5221] vfs_writev+0x37c/0xbb0 [ 84.248225][ T5221] ? __pfx_vfs_writev+0x10/0x10 [ 84.253128][ T5221] ? _raw_spin_unlock_irq+0x2e/0x50 [ 84.258366][ T5221] ? ptrace_notify+0x279/0x380 [ 84.263271][ T5221] __se_sys_pwritev2+0x1ca/0x2d0 [ 84.268385][ T5221] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 84.273874][ T5221] ? exc_page_fault+0x590/0x8c0 [ 84.278744][ T5221] ? __x64_sys_pwritev2+0x21/0xf0 [ 84.283803][ T5221] do_syscall_64+0xf3/0x230 [ 84.288431][ T5221] ? clear_bhb_loop+0x35/0x90 [ 84.293137][ T5221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.299049][ T5221] RIP: 0033:0x7f6618b7b169 [ 84.303474][ T5221] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 84.323121][ T5221] RSP: 002b:00007fffaef68648 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 84.331674][ T5221] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6618b7b169 [ 84.339858][ T5221] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 84.347935][ T5221] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000003 [ 84.355914][ T5221] R10: 0000000000007000 R11: 0000000000000246 R12: 00007fffaef686a0 [ 84.363993][ T5221] R13: 00007fffaef686e0 R14: 0000000001000000 R15: 0000000000000003 [ 84.371990][ T5221] [ 84.375295][ T5221] Kernel Offset: disabled [ 84.379702][ T5221] Rebooting in 86400 seconds..