Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts.
2024/07/30 06:54:11 ignoring optional flag "sandboxArg"="0"
2024/07/30 06:54:11 parsed 1 programs
[ 90.007502][ T29] audit: type=1400 audit(1722322453.461:124): avc: denied { unlink } for pid=3685 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 90.073635][ T3685] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 92.017094][ T29] audit: type=1401 audit(1722322455.471:125): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
2024/07/30 06:54:26 executed programs: 0
2024/07/30 06:54:35 executed programs: 2
[ 112.039771][ T29] audit: type=1400 audit(1722322475.491:126): avc: denied { read write } for pid=4700 comm="syz.0.15" name="raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 112.067667][ T29] audit: type=1400 audit(1722322475.491:127): avc: denied { open } for pid=4700 comm="syz.0.15" path="/dev/raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 112.091203][ T29] audit: type=1400 audit(1722322475.491:128): avc: denied { ioctl } for pid=4700 comm="syz.0.15" path="/dev/raw-gadget" dev="devtmpfs" ino=140 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 112.312198][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 112.492020][ T9] usb 1-1: Using ep0 maxpacket: 8
[ 112.499358][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 112.509068][ T9] usb 1-1: config 0 has an invalid interface number: 199 but max is 3
[ 112.517416][ T9] usb 1-1: config 0 has an invalid interface descriptor of length 2, skipping
[ 112.526327][ T9] usb 1-1: config 0 has an invalid interface number: 54 but max is 3
[ 112.534461][ T9] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[ 112.543345][ T9] usb 1-1: config 0 has an invalid interface number: 108 but max is 3
[ 112.551608][ T9] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[ 112.560315][ T9] usb 1-1: config 0 has no interface number 1
[ 112.566517][ T9] usb 1-1: config 0 has no interface number 2
[ 112.572618][ T9] usb 1-1: config 0 has no interface number 3
[ 112.579107][ T9] usb 1-1: config 0 interface 199 altsetting 14 endpoint 0xC has invalid wMaxPacketSize 0
[ 112.589097][ T9] usb 1-1: config 0 interface 199 altsetting 14 bulk endpoint 0x8 has invalid maxpacket 32
[ 112.599209][ T9] usb 1-1: config 0 interface 199 altsetting 14 endpoint 0x9 has invalid maxpacket 959, setting to 64
[ 112.610180][ T9] usb 1-1: config 0 interface 199 altsetting 14 has a duplicate endpoint with address 0xA, skipping
[ 112.621030][ T9] usb 1-1: config 0 interface 199 altsetting 14 has an invalid descriptor for endpoint zero, skipping
[ 112.632009][ T9] usb 1-1: config 0 interface 199 altsetting 14 has a duplicate endpoint with address 0x8, skipping
[ 112.642891][ T9] usb 1-1: config 0 interface 199 altsetting 14 has a duplicate endpoint with address 0x9, skipping
[ 112.653683][ T9] usb 1-1: config 0 interface 199 altsetting 14 has an invalid descriptor for endpoint zero, skipping
[ 112.665026][ T9] usb 1-1: config 0 interface 199 altsetting 14 endpoint 0xE has invalid maxpacket 443, setting to 64
[ 112.676004][ T9] usb 1-1: config 0 interface 199 altsetting 14 has a duplicate endpoint with address 0x8, skipping
[ 112.686943][ T9] usb 1-1: config 0 interface 199 altsetting 14 has an invalid descriptor for endpoint zero, skipping
[ 112.697930][ T9] usb 1-1: config 0 interface 199 altsetting 14 has 13 endpoint descriptors, different from the interface descriptor's value: 15
[ 112.711398][ T9] usb 1-1: config 0 interface 0 altsetting 1 has a duplicate endpoint with address 0x3, skipping
[ 112.721965][ T9] usb 1-1: config 0 interface 0 altsetting 1 has a duplicate endpoint with address 0x8, skipping
[ 112.732526][ T9] usb 1-1: config 0 interface 0 altsetting 1 has a duplicate endpoint with address 0xE, skipping
[ 112.743067][ T9] usb 1-1: config 0 interface 0 altsetting 1 has a duplicate endpoint with address 0x7, skipping
[ 112.753619][ T9] usb 1-1: config 0 interface 0 altsetting 1 has a duplicate endpoint with address 0xD, skipping
[ 112.764164][ T9] usb 1-1: config 0 interface 0 altsetting 1 has an invalid endpoint descriptor of length 2, skipping
[ 112.775175][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 64
[ 112.786068][ T9] usb 1-1: config 0 interface 0 altsetting 1 has 12 endpoint descriptors, different from the interface descriptor's value: 11
[ 112.799222][ T9] usb 1-1: config 0 interface 54 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[ 112.810119][ T9] usb 1-1: config 0 interface 54 altsetting 10 has a duplicate endpoint with address 0xF, skipping
[ 112.820893][ T9] usb 1-1: config 0 interface 54 altsetting 10 has a duplicate endpoint with address 0xC, skipping
[ 112.831903][ T9] usb 1-1: config 0 interface 54 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[ 112.842807][ T9] usb 1-1: config 0 interface 54 altsetting 10 has a duplicate endpoint with address 0xF, skipping
[ 112.853535][ T9] usb 1-1: config 0 interface 108 altsetting 8 has a duplicate endpoint with address 0x1, skipping
[ 112.864254][ T9] usb 1-1: config 0 interface 108 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[ 112.875149][ T9] usb 1-1: config 0 interface 108 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[ 112.885900][ T9] usb 1-1: config 0 interface 108 altsetting 8 has an endpoint descriptor with address 0x1A, changing to 0xA
[ 112.897496][ T9] usb 1-1: config 0 interface 108 altsetting 8 has a duplicate endpoint with address 0xA, skipping
[ 112.908226][ T9] usb 1-1: config 0 interface 108 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[ 112.919134][ T9] usb 1-1: config 0 interface 108 altsetting 8 endpoint 0x5 has an invalid bInterval 118, changing to 7
[ 112.930279][ T9] usb 1-1: config 0 interface 108 altsetting 8 has a duplicate endpoint with address 0x5, skipping
[ 112.941429][ T9] usb 1-1: config 0 interface 108 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[ 112.952333][ T9] usb 1-1: config 0 interface 108 altsetting 8 has a duplicate endpoint with address 0x8, skipping
[ 112.963041][ T9] usb 1-1: config 0 interface 108 altsetting 8 has a duplicate endpoint with address 0xE, skipping
[ 112.973742][ T9] usb 1-1: config 0 interface 199 has no altsetting 0
[ 112.980520][ T9] usb 1-1: config 0 interface 0 has no altsetting 0
[ 112.987145][ T9] usb 1-1: config 0 interface 54 has no altsetting 0
[ 112.994297][ T9] usb 1-1: config 0 interface 108 has no altsetting 0
[ 113.004277][ T9] usb 1-1: string descriptor 0 read error: -22
[ 113.010984][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=1c.8f
[ 113.020102][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 113.032001][ T9] usb 1-1: config 0 descriptor??
[ 113.038332][ T4702] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 113.249146][ T9] usb 1-1: USB disconnect, device number 2
[ 113.262801][ T9] ==================================================================
[ 113.270894][ T9] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x227/0x250
[ 113.278546][ T9] Read of size 8 at addr ffff8881131c1898 by task kworker/0:1/9
[ 113.286334][ T9]
[ 113.288659][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.10.0-syzkaller-11840-g933069701c1b-dirty #0
[ 113.299312][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 113.309449][ T9] Workqueue: usb_hub_wq hub_event
[ 113.314513][ T9] Call Trace:
[ 113.317872][ T9]
[ 113.320792][ T9] dump_stack_lvl+0x116/0x1f0
[ 113.325498][ T9] print_report+0xc3/0x620
[ 113.329937][ T9] ? __virt_addr_valid+0x5e/0x590
[ 113.334946][ T9] ? __phys_addr+0xc6/0x150
[ 113.339440][ T9] kasan_report+0xd9/0x110
[ 113.343850][ T9] ? hdm_disconnect+0x227/0x250
[ 113.348691][ T9] ? hdm_disconnect+0x227/0x250
[ 113.353540][ T9] hdm_disconnect+0x227/0x250
[ 113.358214][ T9] usb_unbind_interface+0x1e8/0x970
[ 113.363403][ T9] ? kernfs_find_ns+0x2ee/0x3f0
[ 113.368330][ T9] ? __pfx_usb_unbind_interface+0x10/0x10
[ 113.374080][ T9] device_remove+0x122/0x170
[ 113.378672][ T9] device_release_driver_internal+0x44a/0x610
[ 113.384735][ T9] bus_remove_device+0x22f/0x420
[ 113.389672][ T9] device_del+0x396/0x9f0
[ 113.393991][ T9] ? __pfx_device_del+0x10/0x10
[ 113.398829][ T9] ? kobject_put+0x226/0x5b0
[ 113.403408][ T9] usb_disable_device+0x36c/0x7f0
[ 113.408525][ T9] usb_disconnect+0x2e1/0x920
[ 113.413194][ T9] hub_event+0x1be4/0x4f50
[ 113.417598][ T9] ? __pfx_hub_event+0x10/0x10
[ 113.422368][ T9] ? __pfx_lock_acquire+0x10/0x10
[ 113.427442][ T9] ? __pfx_lock_release+0x10/0x10
[ 113.432469][ T9] process_one_work+0x9c5/0x1b40
[ 113.437513][ T9] ? __pfx_lock_acquire+0x10/0x10
[ 113.442524][ T9] ? __pfx_process_one_work+0x10/0x10
[ 113.447901][ T9] ? assign_work+0x1a0/0x250
[ 113.452481][ T9] worker_thread+0x6c8/0xf20
[ 113.457065][ T9] ? __kthread_parkme+0x148/0x220
[ 113.462077][ T9] ? __pfx_worker_thread+0x10/0x10
[ 113.467171][ T9] kthread+0x2c1/0x3a0
[ 113.471240][ T9] ? _raw_spin_unlock_irq+0x23/0x50
[ 113.476440][ T9] ? __pfx_kthread+0x10/0x10
[ 113.481041][ T9] ret_from_fork+0x45/0x80
[ 113.485451][ T9] ? __pfx_kthread+0x10/0x10
[ 113.490037][ T9] ret_from_fork_asm+0x1a/0x30
[ 113.494811][ T9]
[ 113.497811][ T9]
[ 113.500113][ T9] Allocated by task 9:
[ 113.504159][ T9] kasan_save_stack+0x33/0x60
[ 113.508923][ T9] kasan_save_track+0x14/0x30
[ 113.513612][ T9] __kasan_kmalloc+0x8f/0xa0
[ 113.518297][ T9] hdm_probe+0xb3/0x1880
[ 113.522530][ T9] usb_probe_interface+0x309/0x9d0
[ 113.527628][ T9] really_probe+0x23e/0xa90
[ 113.532128][ T9] __driver_probe_device+0x1de/0x440
[ 113.537398][ T9] driver_probe_device+0x4c/0x1b0
[ 113.542441][ T9] __device_attach_driver+0x1df/0x310
[ 113.547798][ T9] bus_for_each_drv+0x157/0x1e0
[ 113.553069][ T9] __device_attach+0x1e8/0x4e0
[ 113.557907][ T9] bus_probe_device+0x17f/0x1c0
[ 113.562743][ T9] device_add+0x114b/0x1a70
[ 113.567364][ T9] usb_set_configuration+0x10cb/0x1c50
[ 113.572814][ T9] usb_generic_driver_probe+0xb1/0x110
[ 113.578347][ T9] usb_probe_device+0xec/0x3e0
[ 113.583091][ T9] really_probe+0x23e/0xa90
[ 113.587587][ T9] __driver_probe_device+0x1de/0x440
[ 113.592956][ T9] driver_probe_device+0x4c/0x1b0
[ 113.598052][ T9] __device_attach_driver+0x1df/0x310
[ 113.603408][ T9] bus_for_each_drv+0x157/0x1e0
[ 113.608242][ T9] __device_attach+0x1e8/0x4e0
[ 113.612990][ T9] bus_probe_device+0x17f/0x1c0
[ 113.617824][ T9] device_add+0x114b/0x1a70
[ 113.622315][ T9] usb_new_device+0xd90/0x1a10
[ 113.627075][ T9] hub_event+0x2e66/0x4f50
[ 113.631488][ T9] process_one_work+0x9c5/0x1b40
[ 113.636413][ T9] worker_thread+0x6c8/0xf20
[ 113.640986][ T9] kthread+0x2c1/0x3a0
[ 113.645040][ T9] ret_from_fork+0x45/0x80
[ 113.649446][ T9] ret_from_fork_asm+0x1a/0x30
[ 113.654281][ T9]
[ 113.656585][ T9] Freed by task 9:
[ 113.660303][ T9] kasan_save_stack+0x33/0x60
[ 113.664963][ T9] kasan_save_track+0x14/0x30
[ 113.669642][ T9] kasan_save_free_info+0x3b/0x60
[ 113.674653][ T9] poison_slab_object+0xf7/0x160
[ 113.679572][ T9] __kasan_slab_free+0x14/0x30
[ 113.684318][ T9] kfree+0x10b/0x380
[ 113.688197][ T9] device_release+0xa1/0x240
[ 113.692784][ T9] kobject_put+0x1fa/0x5b0
[ 113.697188][ T9] device_unregister+0x2f/0xc0
[ 113.701935][ T9] hdm_disconnect+0x10b/0x250
[ 113.706594][ T9] usb_unbind_interface+0x1e8/0x970
[ 113.711779][ T9] device_remove+0x122/0x170
[ 113.716357][ T9] device_release_driver_internal+0x44a/0x610
[ 113.722463][ T9] bus_remove_device+0x22f/0x420
[ 113.727449][ T9] device_del+0x396/0x9f0
[ 113.732074][ T9] usb_disable_device+0x36c/0x7f0
[ 113.737179][ T9] usb_disconnect+0x2e1/0x920
[ 113.741865][ T9] hub_event+0x1be4/0x4f50
[ 113.746395][ T9] process_one_work+0x9c5/0x1b40
[ 113.751500][ T9] worker_thread+0x6c8/0xf20
[ 113.756093][ T9] kthread+0x2c1/0x3a0
[ 113.760174][ T9] ret_from_fork+0x45/0x80
[ 113.764615][ T9] ret_from_fork_asm+0x1a/0x30
[ 113.769371][ T9]
[ 113.771679][ T9] The buggy address belongs to the object at ffff8881131c0000
[ 113.771679][ T9] which belongs to the cache kmalloc-8k of size 8192
[ 113.785824][ T9] The buggy address is located 6296 bytes inside of
[ 113.785824][ T9] freed 8192-byte region [ffff8881131c0000, ffff8881131c2000)
[ 113.799805][ T9]
[ 113.802221][ T9] The buggy address belongs to the physical page:
[ 113.808645][ T9] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1131c0
[ 113.817580][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 113.826120][ T9] flags: 0x200000000000040(head|node=0|zone=2)
[ 113.832265][ T9] page_type: 0xfdffffff(slab)
[ 113.837010][ T9] raw: 0200000000000040 ffff888100042280 ffffea00040ff000 dead000000000002
[ 113.845787][ T9] raw: 0000000000000000 0000000000020002 00000001fdffffff 0000000000000000
[ 113.854355][ T9] head: 0200000000000040 ffff888100042280 ffffea00040ff000 dead000000000002
[ 113.863010][ T9] head: 0000000000000000 0000000000020002 00000001fdffffff 0000000000000000
[ 113.871680][ T9] head: 0200000000000003 ffffea00044c7001 ffffffffffffffff 0000000000000000
[ 113.880339][ T9] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 113.888988][ T9] page dumped because: kasan: bad access detected
[ 113.895396][ T9] page_owner tracks the page as allocated
[ 113.901096][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2651, tgid 2651 (syz-executor), ts 39969872238, free_ts 37861985419
[ 113.922450][ T9] post_alloc_hook+0x2d1/0x350
[ 113.927347][ T9] get_page_from_freelist+0x1311/0x25f0
[ 113.932917][ T9] __alloc_pages_noprof+0x21e/0x2290
[ 113.938195][ T9] alloc_slab_page+0x4e/0xf0
[ 113.942773][ T9] new_slab+0x84/0x260
[ 113.946905][ T9] ___slab_alloc+0xdac/0x1870
[ 113.951595][ T9] __slab_alloc.constprop.0+0x56/0xb0
[ 113.956966][ T9] __kmalloc_cache_noprof+0x27a/0x2c0
[ 113.962327][ T9] cgroup1_get_tree+0x936/0xed0
[ 113.967364][ T9] vfs_get_tree+0x8f/0x380
[ 113.971774][ T9] path_mount+0x14e6/0x1f20
[ 113.976363][ T9] __x64_sys_mount+0x294/0x320
[ 113.981115][ T9] do_syscall_64+0xcd/0x250
[ 113.985608][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.991577][ T9] page last free pid 2646 tgid 2646 stack trace:
[ 113.997892][ T9] free_unref_page+0x698/0xce0
[ 114.002640][ T9] rcu_core+0x828/0x16b0
[ 114.006876][ T9] handle_softirqs+0x209/0x8e0
[ 114.011666][ T9] irq_exit_rcu+0xac/0x110
[ 114.016078][ T9] sysvec_apic_timer_interrupt+0x43/0xb0
[ 114.021699][ T9] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 114.027670][ T9]
[ 114.030061][ T9] Memory state around the buggy address:
[ 114.035691][ T9] ffff8881131c1780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 114.043745][ T9] ffff8881131c1800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 114.051811][ T9] >ffff8881131c1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 114.059860][ T9] ^
[ 114.064719][ T9] ffff8881131c1900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 114.072770][ T9] ffff8881131c1980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 114.080829][ T9] ==================================================================
[ 114.088992][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 114.096192][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.10.0-syzkaller-11840-g933069701c1b-dirty #0
[ 114.106877][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 114.116941][ T9] Workqueue: usb_hub_wq hub_event
[ 114.121959][ T9] Call Trace:
[ 114.125220][ T9]
[ 114.128231][ T9] dump_stack_lvl+0x3d/0x1f0
[ 114.132820][ T9] panic+0x6f5/0x7a0
[ 114.136709][ T9] ? mark_held_locks+0x9f/0xe0
[ 114.141463][ T9] ? __pfx_panic+0x10/0x10
[ 114.145913][ T9] ? irqentry_exit+0x3b/0x90
[ 114.150521][ T9] ? lockdep_hardirqs_on+0x7c/0x110
[ 114.155727][ T9] ? check_panic_on_warn+0x1f/0xb0
[ 114.160854][ T9] check_panic_on_warn+0xab/0xb0
[ 114.165791][ T9] end_report+0x117/0x180
[ 114.170110][ T9] kasan_report+0xe9/0x110
[ 114.174513][ T9] ? hdm_disconnect+0x227/0x250
[ 114.179360][ T9] ? hdm_disconnect+0x227/0x250
[ 114.184210][ T9] hdm_disconnect+0x227/0x250
[ 114.188976][ T9] usb_unbind_interface+0x1e8/0x970
[ 114.194250][ T9] ? kernfs_find_ns+0x2ee/0x3f0
[ 114.199092][ T9] ? __pfx_usb_unbind_interface+0x10/0x10
[ 114.204803][ T9] device_remove+0x122/0x170
[ 114.209386][ T9] device_release_driver_internal+0x44a/0x610
[ 114.215447][ T9] bus_remove_device+0x22f/0x420
[ 114.220545][ T9] device_del+0x396/0x9f0
[ 114.224861][ T9] ? __pfx_device_del+0x10/0x10
[ 114.229697][ T9] ? kobject_put+0x226/0x5b0
[ 114.234274][ T9] usb_disable_device+0x36c/0x7f0
[ 114.239317][ T9] usb_disconnect+0x2e1/0x920
[ 114.243987][ T9] hub_event+0x1be4/0x4f50
[ 114.248388][ T9] ? __pfx_hub_event+0x10/0x10
[ 114.253133][ T9] ? __pfx_lock_acquire+0x10/0x10
[ 114.258140][ T9] ? __pfx_lock_release+0x10/0x10
[ 114.263148][ T9] process_one_work+0x9c5/0x1b40
[ 114.268070][ T9] ? __pfx_lock_acquire+0x10/0x10
[ 114.273121][ T9] ? __pfx_process_one_work+0x10/0x10
[ 114.278482][ T9] ? assign_work+0x1a0/0x250
[ 114.283062][ T9] worker_thread+0x6c8/0xf20
[ 114.287643][ T9] ? __kthread_parkme+0x148/0x220
[ 114.292743][ T9] ? __pfx_worker_thread+0x10/0x10
[ 114.297929][ T9] kthread+0x2c1/0x3a0
[ 114.301988][ T9] ? _raw_spin_unlock_irq+0x23/0x50
[ 114.307171][ T9] ? __pfx_kthread+0x10/0x10
[ 114.311782][ T9] ret_from_fork+0x45/0x80
[ 114.316188][ T9] ? __pfx_kthread+0x10/0x10
[ 114.320787][ T9] ret_from_fork_asm+0x1a/0x30
[ 114.325542][ T9]
[ 114.328839][ T9] Kernel Offset: disabled
[ 114.333153][ T9] Rebooting in 86400 seconds..