diff --git a/CLAUDE.md b/CLAUDE.md index b42d1c6..2d6b58e 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -63,23 +63,27 @@ First build downloads AGP/Compose/Shizuku from Google Maven + Maven Central. - **Prefer USB for adb.** Wireless debugging dies constantly: probe runs churn the wifi the debug link rides on, the Lenovo tablet's ZUI power management kills the listener anyway, and - the port rotates on every restart. Deploys over wireless work between runs; never drive a - probe run over adb. -- Collection loop that works: install over adb → the **user** runs the probes and exports the - JSON manually → archive it under `echolot-prober/reports/` and record findings in - `docs/build-status.md`. + the port rotates on every restart. Never drive a probe run over *wireless* adb. +- Collection loop over USB, fully driveable by Claude: install → `am start` → tap "Run all + probes" → poll `uiautomator dump` until the button label returns to "Run all probes" → tap + "Export JSON" → the report lands in `cache/reports/` and comes back via + `adb shell run-as app.echo_lot.prober cat …` (no need to drive the share sheet; dismiss it + with BACK). Archive under `echolot-prober/reports/`, record findings in `docs/build-status.md`. +- Bash-tool `adb shell` calls with absolute device paths get mangled by Git Bash path + conversion (`/data/…` → `C:/Program Files/Git/data/…`); use the PowerShell tool for those. - Bump `versionCode` on every deployed prober change — it shows on screen and as `proberBuild` in the report; that's how a report is matched to a build. - Known devices: OnePlus 15 (CPH2747, A16) — Shizuku UserService works; Lenovo TB330FU (A15, multi-user) — UserService never binds, the `newProcess` fallback carries it. Full history in build-status.md. -- Gradle needs JDK 17–21 (`JAVA_HOME`); a system JDK 25 breaks AGP 8.7. On machines with - Android Studio, its `jbr` directory works. +- As of the AGP 9.2.0 / Gradle 9.6.0 / Kotlin 2.2.10 bump, JDK 17+ (including 25) works — + AGP 9 requires Gradle 9.1.0+ and Kotlin 2.2.10+ as its minimum KGP version. On machines with + Android Studio, its `jbr` directory works as `JAVA_HOME`. ## Likely next steps 1. Run on physical devices; collect JSON reports across Android versions/vendors. -2. If `trace.errqueue_reachable` is PARTIAL, add the C-over-JNI errqueue shim (recvmsg + cmsg parse) - as a `:native` module and a real `traceroute.udp4` probe. +2. ~~C-over-JNI errqueue shim~~ — not needed; `trace.errqueue_reachable` and `traceroute.udp4` + are SUPPORTED on both known devices via `Os.recvmsg` + `StructMsghdr` reflection. 3. Fold the confirmed capabilities + Shizuku dump-format samples back into the production `core-probe` / `core-shizuku` modules. diff --git a/docs/build-status.md b/docs/build-status.md index 896de1a..1cfddd5 100644 --- a/docs/build-status.md +++ b/docs/build-status.md @@ -167,11 +167,50 @@ registry. `git.rambossek.at/echolot/echolot-server:{v0.1.0,latest}` pulls anonym registry image → anonymous pull. Note the tag convention: image tags carry the bare version (`v0.1.0`), release tags the namespaced one (`server-v0.1.0`); selfupdate normalizes. +## Toolchain upgrade + build-5 tablet re-run (2026-07-30) + +Moved to the laptop (USB adb — far more stable than wireless, as expected). Upgraded the build +off the JDK-21 ceiling: **AGP 8.7.3 → 9.2.0, Gradle 8.14.3 → 9.6.0, Kotlin 2.0.21 → 2.2.10**, +which lets the toolchain run on JDK 25. Two AGP-9 migration edits were required: +- AGP 9 has **built-in Kotlin support**, so applying `org.jetbrains.kotlin.android` alongside it + fails with "extension with name 'kotlin' already registered" — the alias must be dropped + (`kotlin.compose` / `kotlin.serialization` stay; they are separate compiler plugins). +- The `kotlinOptions { jvmTarget }` block came from that plugin and no longer resolves; AGP + derives jvmTarget from `compileOptions` instead. + +`compileSdk`/`targetSdk` 35 → 36, because Android Studio only ships API 36.1 by default and +installing 35 was avoidable churn. **Build-5 re-run on the TB330FU is verdict-identical to +build-4 across all 10 probes** (`…-build5.json`) — the toolchain jump and targetSdk 36 are +behaviour-neutral on this device, including the `newProcess` Shizuku fallback (still 7/7, +`exec_path: newProcess fallback`, UserService still never binds). + +Also of note: `traceroute.udp4` is SUPPORTED here (6 hops via errqueue, "no native shim needed"), +which is what retires next-step 2 below — the JNI shim is not required on either known device. + +**OnePlus 15 build-5 re-run (`CPH2747-android16-sdk36-build5.json`): all 10 SUPPORTED, identical +to build-3.** `exec_path: UserService` on the phone vs `newProcess fallback` on the tablet, both +7/7 — the dual-path executor requirement is now confirmed on the current toolchain on both +devices. Phone is on Android 16 / SDK 36, i.e. `targetSdk = 36` is also exercised natively there. + +Two collection-loop gotchas found while driving the phone over USB: +- **`icmp.ping6`'s verdict is topology-dependent, not build-dependent.** A first run with Shizuku + stopped and only 2 networks up reported UNSUPPORTED; with cellular+wifi present it is the + expected SUPPORTED / "echo reply on cellular only — default network has no v6 path". Do not + read a ping6 verdict without checking `link.snapshot`'s `network_count` in the same report. +- **The Shizuku permission dialog times out after 30 s** (`shizuku.command_battery` logs + `Shizuku permission not granted` at ~30027 ms). Screenshot→read→tap round-trips can exceed + that. Grant the permission *before* starting a run, or accept that the first run after a fresh + install burns the Shizuku probe; the grant is persistent, so the next run is clean. +- The phone auto-rotates; tap coordinates must be recomputed per orientation, and `uiautomator + dump` can report a stale idle state right after a tap — trust the exported JSON's `durationMs` + values as ground truth for whether a run really completed, not the button label. + ## Next steps 1. Build locally, run on several physical devices (varied Android versions/vendors), collect the JSON reports — especially the real per-device Shizuku dump formats. -2. If `trace.errqueue_reachable` = PARTIAL, add a C-over-JNI errqueue shim (`recvmsg`+cmsg parse) - as a `:native` module and a real `traceroute.udp4` probe. +2. ~~If `trace.errqueue_reachable` = PARTIAL, add a C-over-JNI errqueue shim.~~ **Retired** — + SUPPORTED on both known devices; `traceroute.udp4` reads real hops via `Os.recvmsg` + + `StructMsghdr` reflection, so no `:native` module is needed. 3. Start the Go server skeleton (enrollment + profile + sessions + UDP echo with observation blocks + canary-DNS reference records) per probe-protocol.md. 4. Fold confirmed capabilities into the production `core-probe` / `core-shizuku` modules. diff --git a/echolot-prober/reports/CPH2747-android16-sdk36-build5.json b/echolot-prober/reports/CPH2747-android16-sdk36-build5.json new file mode 100644 index 0000000..a6bcda4 --- /dev/null +++ b/echolot-prober/reports/CPH2747-android16-sdk36-build5.json @@ -0,0 +1,191 @@ +{ + "schema": "echolot/prober-report", + "schemaVersion": "0.1.0", + "proberBuild": 5, + "device": { + "manufacturer": "OnePlus", + "model": "CPH2747", + "androidSdk": 36, + "androidRelease": "16" + }, + "results": [ + { + "id": "link.snapshot", + "title": "LinkProperties snapshot (all active networks)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "3 active network(s) read", + "evidence": { + "network_count": "3", + "net0.cellular.iface": "rmnet_data4", + "net0.cellular.mtu": "1500", + "net0.cellular.addrs": "2001:4bb8:417:bd78:e4fe:8cff:febe:ca8c/64", + "net0.cellular.dns": "fda1:3fb1:0:8:0:10:0:101, fda1:3fb1:0:8:0:10:0:100", + "net0.cellular.routes": "::/0 -> fe80::246f:12be:21ef:1b54 rmnet_data4 mtu 1500 | 2001:4bb8:417:bd78::/64 -> :: rmnet_data4 mtu 0", + "net0.cellular.domains": "", + "net0.cellular.nat64": "none", + "net0.cellular.private_dns": "off/opportunistic", + "net1.wifi.iface": "wlan0", + "net1.wifi.mtu": "0", + "net1.wifi.addrs": "fe80::bcf6:edff:fe67:b139/64, 10.13.102.122/24", + "net1.wifi.dns": "10.13.102.1", + "net1.wifi.routes": "fe80::/64 -> :: wlan0 mtu 0 | ::/0 -> fe80::7a9a:18ff:fe54:b8f9 wlan0 mtu 0 | 10.13.102.0/24 -> 0.0.0.0 wlan0 mtu 0 | 0.0.0.0/0 -> 10.13.102.1 wlan0 mtu 0", + "net1.wifi.domains": "hudelist.local", + "net1.wifi.nat64": "none", + "net1.wifi.private_dns": "off/opportunistic", + "net2.cellular.iface": "rmnet_data2", + "net2.cellular.mtu": "1500", + "net2.cellular.addrs": "10.73.62.113/30, 2001:4bb8:2fb:fe4c:f028:16ff:fee4:774d/64", + "net2.cellular.dns": "10.88.152.122, 10.88.152.123, fda1:3fb1:0:8:0:10:0:102, fda1:3fb1:0:8:0:10:0:103", + "net2.cellular.routes": "0.0.0.0/0 -> 10.73.62.114 rmnet_data2 mtu 1500 | ::/0 -> fe80::9419:9179:7ab7:1a1d rmnet_data2 mtu 1500 | 10.73.62.112/30 -> 0.0.0.0 rmnet_data2 mtu 0 | 2001:4bb8:2fb:fe4c::/64 -> :: rmnet_data2 mtu 0", + "net2.cellular.domains": "", + "net2.cellular.nat64": "none", + "net2.cellular.private_dns": "off/opportunistic" + }, + "durationMs": 2 + }, + { + "id": "icmp.ping4", + "title": "ICMPv4 echo (unprivileged datagram socket)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "Echo reply on the default network", + "evidence": { + "default": "reply type=0 rtt_ms=79.3 bytes=22 target=1.1.1.1", + "net.cellular": "reply type=0 rtt_ms=180.5 bytes=22 target=1.1.1.1", + "net.wifi": "reply type=0 rtt_ms=39.7 bytes=22 target=1.1.1.1" + }, + "durationMs": 304 + }, + { + "id": "icmp.ping6", + "title": "ICMPv6 echo (unprivileged datagram socket)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "Echo reply on cellular only — default network has no v6 path", + "evidence": { + "default": "error: recvfrom failed: EAGAIN (Try again)", + "net.cellular": "reply type=129 rtt_ms=53.8 bytes=22 target=2606:4700:4700::1111", + "net.wifi": "error: recvfrom failed: EAGAIN (Try again)" + }, + "durationMs": 6308 + }, + { + "id": "sockopt.matrix", + "title": "Socket options: TTL, RECVERR, MTU_DISCOVER (DF)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "4/4 core sockopts accepted; IP_MTU read=false", + "evidence": { + "IP_TTL": "accepted (ttl=5)", + "IP_TOS/DSCP": "accepted (EF/46)", + "IP_RECVERR": "accepted", + "IP_MTU_DISCOVER=PROBE": "accepted (DF set)", + "IP_MTU(read)": "unreadable: android.system.Os.getsockoptInt [class java.io.FileDescriptor, int, int]" + }, + "durationMs": 2 + }, + { + "id": "trace.errqueue_reachable", + "title": "Traceroute via IP_RECVERR + MSG_ERRQUEUE", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "Errqueue path fully reachable from Os API", + "evidence": { + "IP_RECVERR": "accepted", + "IP_TTL=1": "accepted", + "StructMsghdr": "true", + "Os.recvmsg": "true" + }, + "durationMs": 1 + }, + { + "id": "traceroute.udp4", + "title": "UDP traceroute via MSG_ERRQUEUE (no root, no JNI)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "6 hop(s) read via errqueue — no native shim needed", + "evidence": { + "recvmsg_api": "StructMsghdr + Os.recvmsg via reflection", + "target": "1.1.1.1", + "hop.1": "10.13.102.1 icmp type=11 origin=2 ~41 ms", + "hop.2": "178.191.103.254 icmp type=11 origin=2 ~41 ms", + "hop.3": "195.3.76.32 icmp type=11 origin=2 ~41 ms", + "hop.4": "195.3.64.153 icmp type=11 origin=2 ~41 ms", + "hop.5": "172.68.48.30 icmp type=11 origin=2 ~41 ms", + "hop.6": "172.68.48.14 icmp type=11 origin=2 ~41 ms" + }, + "durationMs": 248 + }, + { + "id": "multinetwork.request_and_bind", + "title": "Concurrent per-network binding (Wi-Fi / cellular / ethernet)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "2 transport(s) acquired and bound (only currently-present links can bind)", + "evidence": { + "wifi": "network acquired; bindSocket=ok; downKbps=27368", + "cellular": "network acquired; bindSocket=ok; downKbps=13231", + "ethernet": "no network within 4s" + }, + "durationMs": 4013 + }, + { + "id": "local.mdns_discover", + "title": "Multicast reception (MulticastLock + mDNS/NSD)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "mDNS discovery ran; 4 service(s)/type(s) seen across 3 queries", + "evidence": { + "multicast_lock": "acquired", + "meta.started": "true", + "meta.found": "0", + "meta.type": "_services._dns-sd._udp.", + "http.started": "true", + "http.found": "4", + "http.names": "Magic 2 LAN 1-1, Magic 2 LAN triple #5, Magic 2 LAN triple #4, EPSON WF-7840 Series", + "http.type": "_http._tcp.", + "googlecast.started": "true", + "googlecast.found": "0", + "googlecast.type": "_googlecast._tcp." + }, + "durationMs": 10005 + }, + { + "id": "peer.ble_advertise", + "title": "BLE peripheral advertising (peer-mode control channel)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "Advertising start: success", + "evidence": { + "FEATURE_BLUETOOTH_LE": "true", + "adapter_enabled": "true", + "multi_advertisement_supported": "true", + "startAdvertising": "success" + }, + "durationMs": 29 + }, + { + "id": "shizuku.command_battery", + "title": "Shizuku shell tier (ip neigh / route / dumpsys network_stack)", + "tier": "SHIZUKU", + "verdict": "SUPPORTED", + "summary": "Shizuku runs as shell(2000); 7/7 commands returned data", + "evidence": { + "binder_alive": "true", + "version": "13", + "runs_as": "shell(2000)", + "permission": "true", + "exec_path": "UserService", + "id": "uid=2000\nuid=2000(shell) gid=2000(shell) groups=2000(shell),1004(input),1007(log),1011(adb),1015(sdcard_rw),1028(sdcard_r),1078(ext_data_rw),1079(ext_obb_rw),3001(net_bt_admin),3002(net_bt),3003(inet),3006(net_bw_stats),3009(readproc),3011(uhid),3012(readtracefs) context=u:r:shell:s0", + "ip_neigh": "uid=2000\n10.13.102.111 dev wlan0 FAILED\n10.13.102.50 dev wlan0 lladdr 50:57:9c:4f:7a:3c STALE\n10.13.102.31 dev wlan0 lladdr 98:5f:d3:f6:f1:75 STALE\n10.13.102.116 dev wlan0 lladdr 0c:08:b4:03:68:0e STALE\n10.13.102.120 dev wlan0 lladdr 0e:d8:14:58:6c:8b STALE\n10.13.102.5 dev wlan0 lladdr 90:09:d0:1a:83:e4 STALE\n10.13.102.1 dev wlan0 lladdr 78:9a:18:54:b8:f9 REACHABLE\n10.13.102.21 dev wlan0 lladdr c8:7f:54:01:94:7c STALE\nfe80::babe:f4ff:febc:caf9 dev wlan0 lladdr b8:be:f4:bc:ca:f9 REACHABLE\nfe80::7a9a:18ff:fe54:b8f9 dev wlan0 lladdr 78:9a:18:54:b8:f9 router STALE\nfe80::babe:f4ff:febc:cacf dev wlan0 lladdr b8:be:f4:bc:ca:cf REACHABLE\nfe80::babe:f4ff:fec2:bf14 dev wlan0 lladdr b8:be:f4:c2:bf:14 REACHABLE", + "ip6_route": "uid=2000\nfe80::/64 dev wlan0 table 1028 proto kernel metric 256 pref medium\nfe80::/64 dev wlan0 table 1028 proto static metric 1024 pref medium\ndefault via fe80::7a9a:18ff:fe54:b8f9 dev wlan0 table 1028 proto ra metric 1024 expires 1269sec pref medium\nfe80::/64 dev vgate0 table 1031 proto kernel metric 256 pref medium\n2001:4bb8:417:bd78::/64 dev rmnet_data4 table 1032 proto kernel metric 256 pref medium\n2001:4bb8:417:bd78::/64 dev rmnet_data4 table 1032 proto static metric 1024 pref medium\nfe80::/64 dev rmnet_data4 table 1032 proto kernel metric 256 pref medium\ndefault via fe80::246f:12be:21ef:1b54 dev rmnet_data4 table 1032 proto ra metric 1024 expires 64373sec hoplimit 255 pref medium\n2001:4bb8:2fb:fe4c::/64 dev rmnet_data2 table 1000000022 proto static metric 1024 pref medium\nfe80::/64 dev wlan0 table 1000000028 proto static metric 1024 pref medium\n2001:4bb8:417:bd78::/64 dev rmnet_data4 table 1000000032 proto static metric 1024 pref medium\nfe80::/64 dev dummy0 table 1002 proto kernel metric 256 pref medium\ndefault dev dummy0 table 1002 proto static metric 1024 pref medium\nfe80::/64 dev ifb0 table 1003 proto kernel metric 256 pref medium\nfe80::/64 dev ifb1 table 1004 proto kerne", + "ip_addr": "uid=2000\n1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000\n link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00\n inet 127.0.0.1/8 scope host lo\n valid_lft forever preferred_lft forever\n inet6 ::1/128 scope host \n valid_lft forever preferred_lft forever\n2: dummy0: mtu 1500 qdisc noqueue state UNKNOWN group default qlen 1000\n link/ether be:3d:e2:93:78:b9 brd ff:ff:ff:ff:ff:ff\n inet6 fe80::bc3d:e2ff:fe93:78b9/64 scope link \n valid_lft forever preferred_lft forever\n3: ifb0: mtu 1500 qdisc htb state UNKNOWN group default qlen 1000\n link/ether ba:6e:46:b5:3d:bb brd ff:ff:ff:ff:ff:ff\n inet6 fe80::b86e:46ff:feb5:3dbb/64 scope link \n valid_lft forever preferred_lft forever\n4: ifb1: mtu 1500 qdisc htb state UNKNOWN group default qlen 1000\n link/ether d6:2a:e2:f5:93:8f brd ff:ff:ff:ff:ff:ff\n inet6 fe80::d42a:e2ff:fef5:938f/64 scope link \n valid_lft forever preferred_lft forever\n5: tunl0@NONE: mtu 1480 qdisc noop state DOWN group default qlen 1000\n link/ipip 0.0.0.0 brd 0.0.0.0\n6: gre0@NONE: what=CMD_POST_DHCP_ACTION screen=on v4 v4r v4dns v6r\n rec[8]: time=07-30 16:23:27.784 processed=L2ConnectedState org=L3ConnectedState dest= what=CMD_IPV4_PROVISIONING_SUCCESS screen=on DhcpResultsParcelable{baseConfiguration: IP address 10.13.102.122/24 Gateway 10.13.102.1 DNS servers: [ 10.13.102.1 ] Domains hudelist.local, leaseDuration: 600, mtu: 0, serverAddress: 10.13.102.1, vendorInfo: null, serverHostName: , captivePortalApiUrl: null}\n rec[9]: time=07-30 16:23:27.791 processed=ConnectableState org=L3ConnectedState dest= what=CMD_UPDATE_LINKPROPERTIES screen=on 17 0 v4 v4r v4dns v6r\n rec[10]: time=07-30 16:23:47.971 processed=ConnectableState org=L3ConnectedState dest= what=CMD_SCREEN_STATE_CHANGED screen=off 0 0\n--\n rec[31]: time=07-30 16:28:27.831 processed=L2ConnectedState org=L3ConnectedState dest= what=CMD_POST_DHCP_ACTION screen=off v4 v4r v4dns v6r\n rec[32]: time=07-30 16:28:27.835 processed=L2ConnectedState org=L3ConnectedState dest= what=CMD_IPV4_PROVISIONING_SUCCESS screen=off DhcpResultsParcelable{baseConfiguration: IP address 10.13.1" + }, + "durationMs": 6000 + } + ] +} \ No newline at end of file diff --git a/echolot-prober/reports/TB330FU-android15-sdk35-build5.json b/echolot-prober/reports/TB330FU-android15-sdk35-build5.json new file mode 100644 index 0000000..08f3f5e --- /dev/null +++ b/echolot-prober/reports/TB330FU-android15-sdk35-build5.json @@ -0,0 +1,173 @@ +{ + "schema": "echolot/prober-report", + "schemaVersion": "0.1.0", + "proberBuild": 5, + "device": { + "manufacturer": "LENOVO", + "model": "TB330FU", + "androidSdk": 35, + "androidRelease": "15" + }, + "results": [ + { + "id": "link.snapshot", + "title": "LinkProperties snapshot (all active networks)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "1 active network(s) read", + "evidence": { + "network_count": "1", + "net0.wifi.iface": "wlan0", + "net0.wifi.mtu": "0", + "net0.wifi.addrs": "fe80::416:b9ff:feac:5b65/64, 10.13.102.125/24", + "net0.wifi.dns": "10.13.102.1", + "net0.wifi.routes": "fe80::/64 -> :: wlan0 mtu 0 | ::/0 -> fe80::7a9a:18ff:fe54:b8f9 wlan0 mtu 0 | 10.13.102.0/24 -> 0.0.0.0 wlan0 mtu 0 | 0.0.0.0/0 -> 10.13.102.1 wlan0 mtu 0", + "net0.wifi.domains": "hudelist.local", + "net0.wifi.nat64": "none", + "net0.wifi.private_dns": "off/opportunistic" + }, + "durationMs": 15 + }, + { + "id": "icmp.ping4", + "title": "ICMPv4 echo (unprivileged datagram socket)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "Echo reply on the default network", + "evidence": { + "default": "reply type=0 rtt_ms=104.5 bytes=22 target=1.1.1.1", + "net.wifi": "reply type=0 rtt_ms=24.2 bytes=22 target=1.1.1.1" + }, + "durationMs": 135 + }, + { + "id": "icmp.ping6", + "title": "ICMPv6 echo (unprivileged datagram socket)", + "tier": "APP", + "verdict": "ERROR", + "summary": "No echo reply on any of 2 attempt(s)", + "evidence": { + "default": "error: recvfrom failed: EAGAIN (Try again)", + "net.wifi": "error: recvfrom failed: EAGAIN (Try again)" + }, + "durationMs": 6125 + }, + { + "id": "sockopt.matrix", + "title": "Socket options: TTL, RECVERR, MTU_DISCOVER (DF)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "4/4 core sockopts accepted; IP_MTU read=false", + "evidence": { + "IP_TTL": "accepted (ttl=5)", + "IP_TOS/DSCP": "accepted (EF/46)", + "IP_RECVERR": "accepted", + "IP_MTU_DISCOVER=PROBE": "accepted (DF set)", + "IP_MTU(read)": "unreadable: android.system.Os.getsockoptInt [class java.io.FileDescriptor, int, int]" + }, + "durationMs": 6 + }, + { + "id": "trace.errqueue_reachable", + "title": "Traceroute via IP_RECVERR + MSG_ERRQUEUE", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "Errqueue path fully reachable from Os API", + "evidence": { + "IP_RECVERR": "accepted", + "IP_TTL=1": "accepted", + "StructMsghdr": "true", + "Os.recvmsg": "true" + }, + "durationMs": 5 + }, + { + "id": "traceroute.udp4", + "title": "UDP traceroute via MSG_ERRQUEUE (no root, no JNI)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "5 hop(s) read via errqueue — no native shim needed", + "evidence": { + "recvmsg_api": "StructMsghdr + Os.recvmsg via reflection", + "target": "1.1.1.1", + "hop.1": "10.13.102.1 icmp type=11 origin=2 ~44 ms", + "hop.2": "178.191.103.254 icmp type=11 origin=2 ~41 ms", + "hop.3": "195.3.76.32 icmp type=11 origin=2 ~44 ms", + "hop.4": "* (no errqueue event in 900 ms)", + "hop.5": "172.68.48.30 icmp type=11 origin=2 ~42 ms", + "hop.6": "172.68.48.14 icmp type=11 origin=2 ~42 ms" + }, + "durationMs": 1140 + }, + { + "id": "multinetwork.request_and_bind", + "title": "Concurrent per-network binding (Wi-Fi / cellular / ethernet)", + "tier": "APP", + "verdict": "PARTIAL", + "summary": "1 transport(s) acquired and bound (only currently-present links can bind)", + "evidence": { + "wifi": "network acquired; bindSocket=ok; downKbps=30000", + "cellular": "no network within 4s", + "ethernet": "no network within 4s" + }, + "durationMs": 8036 + }, + { + "id": "local.mdns_discover", + "title": "Multicast reception (MulticastLock + mDNS/NSD)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "mDNS discovery ran; 4 service(s)/type(s) seen across 3 queries", + "evidence": { + "multicast_lock": "acquired", + "meta.started": "true", + "meta.found": "0", + "meta.type": "_services._dns-sd._udp.", + "http.started": "true", + "http.found": "4", + "http.names": "Magic 2 LAN 1-1, Magic 2 LAN triple #5, Magic 2 LAN triple #4, EPSON WF-7840 Series", + "http.type": "_http._tcp.", + "googlecast.started": "true", + "googlecast.found": "0", + "googlecast.type": "_googlecast._tcp." + }, + "durationMs": 10042 + }, + { + "id": "peer.ble_advertise", + "title": "BLE peripheral advertising (peer-mode control channel)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "Advertising start: success", + "evidence": { + "FEATURE_BLUETOOTH_LE": "true", + "adapter_enabled": "true", + "multi_advertisement_supported": "true", + "startAdvertising": "success" + }, + "durationMs": 74 + }, + { + "id": "shizuku.command_battery", + "title": "Shizuku shell tier (ip neigh / route / dumpsys network_stack)", + "tier": "SHIZUKU", + "verdict": "SUPPORTED", + "summary": "Shizuku runs as shell(2000); 6/7 commands returned data", + "evidence": { + "binder_alive": "true", + "version": "13", + "runs_as": "shell(2000)", + "permission": "true", + "exec_path": "newProcess fallback (UserService bind failed)", + "id": "uid=2000(shell) gid=2000(shell) groups=2000(shell),1004(input),1007(log),1011(adb),1015(sdcard_rw),1028(sdcard_r),1078(ext_data_rw),1079(ext_obb_rw),3001(net_bt_admin),3002(net_bt),3003(inet),3006(net_bw_stats),3009(readproc),3011(uhid),3012(readtracefs) context=u:r:shell:s0", + "ip_neigh": "10.13.102.21 dev wlan0 lladdr c8:7f:54:01:94:7c STALE\n10.13.102.64 dev wlan0 lladdr b8:be:f4:c2:bf:14 STALE\n10.13.102.5 dev wlan0 lladdr 90:09:d0:1a:83:e4 STALE\n10.13.102.1 dev wlan0 lladdr 78:9a:18:54:b8:f9 STALE\n10.13.102.79 dev wlan0 lladdr 02:11:32:25:63:bb STALE\nfe80::babe:f4ff:febc:cacf dev wlan0 lladdr b8:be:f4:bc:ca:cf STALE\nfe80::7a9a:18ff:fe54:b8f9 dev wlan0 lladdr 78:9a:18:54:b8:f9 router STALE\nfe80::babe:f4ff:fec2:bf14 dev wlan0 lladdr b8:be:f4:c2:bf:14 STALE\nfe80::babe:f4ff:febc:caf9 dev wlan0 lladdr b8:be:f4:bc:ca:f9 STALE", + "ip6_route": "fe80::/64 dev wlan0 table 1000000015 proto static metric 1024 pref medium\nfe80::/64 dev dummy0 table 1002 proto kernel metric 256 pref medium\ndefault dev dummy0 table 1002 proto static metric 1024 pref medium\nfe80::/64 dev wlan0 table 1015 proto kernel metric 256 pref medium\nfe80::/64 dev wlan0 table 1015 proto static metric 1024 pref medium\ndefault via fe80::7a9a:18ff:fe54:b8f9 dev wlan0 table 1015 proto ra metric 1024 expires 1622sec pref medium\nlocal ::1 dev lo table local proto kernel metric 0 pref medium\nlocal fe80::416:b9ff:feac:5b65 dev wlan0 table local proto kernel metric 0 pref medium\nlocal fe80::1450:43ff:feec:93c4 dev dummy0 table local proto kernel metric 0 pref medium\nmulticast ff00::/8 dev dummy0 table local proto kernel metric 256 pref medium\nmulticast ff00::/8 dev wlan0 table local proto kernel metric 256 pref medium", + "ip_addr": "1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000\n link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00\n inet 127.0.0.1/8 scope host lo\n valid_lft forever preferred_lft forever\n inet6 ::1/128 scope host \n valid_lft forever preferred_lft forever\n2: dummy0: mtu 1500 qdisc noqueue state UNKNOWN group default qlen 1000\n link/ether 16:50:43:ec:93:c4 brd ff:ff:ff:ff:ff:ff\n inet6 fe80::1450:43ff:feec:93c4/64 scope link \n valid_lft forever preferred_lft forever\n3: ifb0: mtu 1500 qdisc noop state DOWN group default qlen 32\n link/ether f6:d4:d4:9b:51:9c brd ff:ff:ff:ff:ff:ff\n4: ifb1: mtu 1500 qdisc noop state DOWN group default qlen 32\n link/ether fe:16:ea:60:a2:d1 brd ff:ff:ff:ff:ff:ff\n5: tunl0@NONE: mtu 1480 qdisc noop state DOWN group default qlen 1000\n link/ipip 0.0.0.0 brd 0.0.0.0\n6: gre0@NONE: mtu 1476 qdisc noop state DOWN group default qlen 1000\n link/gre 0.0.0.0 brd 0.0.0.0\n7: gretap0@NONE: mtu 1462 qdisc noop state DOWN group default qlen 1000\n link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:f", + "ip_monitor": "EXEC_TIMEOUT(newProcess)", + "dhcp_log": "Recently active IpClient logs:\nIpClient.wlan0\n IpClient.wlan0 APF dump:\n No active ApfFilter; IpClient not yet started.\n \n IpClient.wlan0 current ProvisioningConfiguration:\n N/A\n \n IpClient.wlan0 StateMachine dump:\n 2026-07-30T14:15:44.904384 - CMD_UPDATE_L2INFORMATION wlan0/15 0 0 Layer2InformationParcelable{l2Key: null, cluster: null, bssid: null} [rcvd_in=null, proc_in=null]\n 2026-07-30T14:15:45.903681 - CMD_UPDATE_L2INFORMATION wlan0/15 0 0 Layer2InformationParcelable{l2Key: We37ae5a065df5f7e, cluster: G8ead16cc1945078e, bssid: 24:5a:4c:5f:6d:2e} [rcvd_in=null, proc_in=null]\n 2026-07-30T14:15:45.917119 - CMD_STOP wlan0/15 1 0 null [rcvd_in=StoppedState, proc_in=IpClient$StoppedState]\n 2026-07-30T14:15:45.917386 - CMD_UPDATE_HTTP_PROXY wlan0/15 0 0 null [rcvd_in=StoppedState, proc_in=IpClient$StoppedState]\n 2026-07-30T14:15:45.921937 - CMD_UPDATE_TCP_BUFFER_SIZES wlan0/15 0 0 1730560,3461120,6922240,524288,1048576,4525824 [rcvd_in=StoppedState, proc_in=IpClient$StoppedState]\n 2026-07-30T14:15:45.922243 - INVOKE getInterfaceVersion\n 2026-07-30T14:15:45.923124 - CMD_START wlan0/15 0 0 ProvisioningConfiguration{mUniqueEui64AddressesOnly: false, mEnab", + "wifi_dump": "rec[2]: time=07-30 15:44:09.909 processed=L2ConnectedState org=L3ConnectedState dest= what=CMD_POST_DHCP_ACTION screen=off v4 v4r v4dns v6r\n rec[3]: time=07-30 15:44:09.915 processed=L2ConnectedState org=L3ConnectedState dest= what=CMD_IPV4_PROVISIONING_SUCCESS screen=off DhcpResultsParcelable{baseConfiguration: IP address 10.13.102.125/24 Gateway 10.13.102.1 DNS servers: [ 10.13.102.1 ] Domains hudelist.local, leaseDuration: 600, mtu: 0, serverAddress: 10.13.102.1, vendorInfo: null, serverHostName: , captivePortalApiUrl: null}\n rec[4]: time=07-30 15:44:09.916 processed=ConnectableState org=L3ConnectedState dest= what=CMD_UPDATE_LINKPROPERTIES screen=off 3 0 v4 v4r v4dns v6r\n rec[5]: time=07-30 15:48:27.650 processed=ConnectableState org=L3ConnectedState dest= what=CMD_INSTALL_PACKET_FILTER screen=off len=435\n--\n rec[13]: time=07-30 15:49:09.976 processed=L2ConnectedState org=L3ConnectedState dest= what=CMD_POST_DHCP_ACTION screen=on v4 v4r v4dns v6r\n rec[14]: time=07-30 15:49:10.006 processed=L2ConnectedState org=L3ConnectedState dest= what=CMD_IPV4_PROVISIONING_SUCCESS screen=on DhcpResultsParcelable{baseConfiguration: IP address 10.13.102.125" + }, + "durationMs": 55313 + } + ] +} \ No newline at end of file