diff --git a/docs/build-status.md b/docs/build-status.md index 0b16571..3ff6be0 100644 --- a/docs/build-status.md +++ b/docs/build-status.md @@ -139,6 +139,16 @@ Archived as `…-build2.json` in `echolot-prober/reports/`. The findings: everywhere. (Phone build 3: still 7/7; `ip_monitor` now catches provoked NEIGH PROBE→REACHABLE transitions, and a mid-path router dropping one TTL round showed the "*" hop path works in traceroute.udp4.) + + **Build-4 verdict (`…-build4.json`): the fallback WORKS.** Tablet Shizuku now SUPPORTED via + `exec_path: newProcess fallback` — 6/7 commands with real data (full neighbor table, per-netId + v6 route tables, Lenovo's IpClient dump — a distinctly different format from OnePlus's, i.e. + the per-vendor parser sample we wanted). **core-shizuku design consequence: dual-path executor + is mandatory** — UserService where it binds, newProcess where it doesn't; both confirmed live + on real hardware. Known rough edges: `ip monitor` times out under newProcess (subshell trick + doesn't survive that path); the 2×25 s bind wait before falling back is worth shortening once + a device is known-bad. Tablet UserService root cause still open — multi-user (3 users) is the + prime suspect; Shizuku app is current (13.6.0), so the stale-app theory is dead. - `ip_monitor` returned no events this run even with the provoked gateway ping (gateway was already REACHABLE, so no NEIGH transition happened). Evidence-dependent, not a bug. diff --git a/echolot-prober/reports/TB330FU-android15-sdk35-build4.json b/echolot-prober/reports/TB330FU-android15-sdk35-build4.json new file mode 100644 index 0000000..cdff7e2 --- /dev/null +++ b/echolot-prober/reports/TB330FU-android15-sdk35-build4.json @@ -0,0 +1,173 @@ +{ + "schema": "echolot/prober-report", + "schemaVersion": "0.1.0", + "proberBuild": 4, + "device": { + "manufacturer": "LENOVO", + "model": "TB330FU", + "androidSdk": 35, + "androidRelease": "15" + }, + "results": [ + { + "id": "link.snapshot", + "title": "LinkProperties snapshot (all active networks)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "1 active network(s) read", + "evidence": { + "network_count": "1", + "net0.wifi.iface": "wlan0", + "net0.wifi.mtu": "0", + "net0.wifi.addrs": "fe80::cd8:14ff:fe58:6c8b/64, 10.13.102.120/24", + "net0.wifi.dns": "10.13.102.1", + "net0.wifi.routes": "fe80::/64 -> :: wlan0 mtu 0 | ::/0 -> fe80::7a9a:18ff:fe54:b8f9 wlan0 mtu 0 | 10.13.102.0/24 -> 0.0.0.0 wlan0 mtu 0 | 0.0.0.0/0 -> 10.13.102.1 wlan0 mtu 0", + "net0.wifi.domains": "hudelist.local", + "net0.wifi.nat64": "none", + "net0.wifi.private_dns": "off/opportunistic" + }, + "durationMs": 11 + }, + { + "id": "icmp.ping4", + "title": "ICMPv4 echo (unprivileged datagram socket)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "Echo reply on the default network", + "evidence": { + "default": "reply type=0 rtt_ms=33.1 bytes=22 target=1.1.1.1", + "net.wifi": "reply type=0 rtt_ms=22.6 bytes=22 target=1.1.1.1" + }, + "durationMs": 65 + }, + { + "id": "icmp.ping6", + "title": "ICMPv6 echo (unprivileged datagram socket)", + "tier": "APP", + "verdict": "ERROR", + "summary": "No echo reply on any of 2 attempt(s)", + "evidence": { + "default": "error: recvfrom failed: EAGAIN (Try again)", + "net.wifi": "error: recvfrom failed: EAGAIN (Try again)" + }, + "durationMs": 6322 + }, + { + "id": "sockopt.matrix", + "title": "Socket options: TTL, RECVERR, MTU_DISCOVER (DF)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "4/4 core sockopts accepted; IP_MTU read=false", + "evidence": { + "IP_TTL": "accepted (ttl=5)", + "IP_TOS/DSCP": "accepted (EF/46)", + "IP_RECVERR": "accepted", + "IP_MTU_DISCOVER=PROBE": "accepted (DF set)", + "IP_MTU(read)": "unreadable: android.system.Os.getsockoptInt [class java.io.FileDescriptor, int, int]" + }, + "durationMs": 5 + }, + { + "id": "trace.errqueue_reachable", + "title": "Traceroute via IP_RECVERR + MSG_ERRQUEUE", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "Errqueue path fully reachable from Os API", + "evidence": { + "IP_RECVERR": "accepted", + "IP_TTL=1": "accepted", + "StructMsghdr": "true", + "Os.recvmsg": "true" + }, + "durationMs": 10 + }, + { + "id": "traceroute.udp4", + "title": "UDP traceroute via MSG_ERRQUEUE (no root, no JNI)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "6 hop(s) read via errqueue — no native shim needed", + "evidence": { + "recvmsg_api": "StructMsghdr + Os.recvmsg via reflection", + "target": "1.1.1.1", + "hop.1": "10.13.102.1 icmp type=11 origin=2 ~46 ms", + "hop.2": "178.191.103.254 icmp type=11 origin=2 ~43 ms", + "hop.3": "195.3.76.32 icmp type=11 origin=2 ~44 ms", + "hop.4": "195.3.64.153 icmp type=11 origin=2 ~44 ms", + "hop.5": "172.68.48.30 icmp type=11 origin=2 ~44 ms", + "hop.6": "172.68.48.63 icmp type=11 origin=2 ~44 ms" + }, + "durationMs": 272 + }, + { + "id": "multinetwork.request_and_bind", + "title": "Concurrent per-network binding (Wi-Fi / cellular / ethernet)", + "tier": "APP", + "verdict": "PARTIAL", + "summary": "1 transport(s) acquired and bound (only currently-present links can bind)", + "evidence": { + "wifi": "network acquired; bindSocket=ok; downKbps=60000", + "cellular": "no network within 4s", + "ethernet": "no network within 4s" + }, + "durationMs": 8036 + }, + { + "id": "local.mdns_discover", + "title": "Multicast reception (MulticastLock + mDNS/NSD)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "mDNS discovery ran; 4 service(s)/type(s) seen across 3 queries", + "evidence": { + "multicast_lock": "acquired", + "meta.started": "true", + "meta.found": "0", + "meta.type": "_services._dns-sd._udp.", + "http.started": "true", + "http.found": "4", + "http.names": "Magic 2 LAN 1-1, Magic 2 LAN triple #5, Magic 2 LAN triple #4, EPSON WF-7840 Series", + "http.type": "_http._tcp.", + "googlecast.started": "true", + "googlecast.found": "0", + "googlecast.type": "_googlecast._tcp." + }, + "durationMs": 10026 + }, + { + "id": "peer.ble_advertise", + "title": "BLE peripheral advertising (peer-mode control channel)", + "tier": "APP", + "verdict": "SUPPORTED", + "summary": "Advertising start: success", + "evidence": { + "FEATURE_BLUETOOTH_LE": "true", + "adapter_enabled": "true", + "multi_advertisement_supported": "true", + "startAdvertising": "success" + }, + "durationMs": 75 + }, + { + "id": "shizuku.command_battery", + "title": "Shizuku shell tier (ip neigh / route / dumpsys network_stack)", + "tier": "SHIZUKU", + "verdict": "SUPPORTED", + "summary": "Shizuku runs as shell(2000); 6/7 commands returned data", + "evidence": { + "binder_alive": "true", + "version": "13", + "runs_as": "shell(2000)", + "permission": "true", + "exec_path": "newProcess fallback (UserService bind failed)", + "id": "uid=2000(shell) gid=2000(shell) groups=2000(shell),1004(input),1007(log),1011(adb),1015(sdcard_rw),1028(sdcard_r),1078(ext_data_rw),1079(ext_obb_rw),3001(net_bt_admin),3002(net_bt),3003(inet),3006(net_bw_stats),3009(readproc),3011(uhid),3012(readtracefs) context=u:r:shell:s0", + "ip_neigh": "10.13.102.21 dev wlan0 lladdr c8:7f:54:01:94:7c STALE\n10.13.102.122 dev wlan0 lladdr be:f6:ed:67:b1:39 STALE\n10.13.102.1 dev wlan0 lladdr 78:9a:18:54:b8:f9 REACHABLE\n10.13.102.50 dev wlan0 lladdr 50:57:9c:4f:7a:3c STALE\nfe80::babe:f4ff:febc:cacf dev wlan0 lladdr b8:be:f4:bc:ca:cf STALE\nfe80::7a9a:18ff:fe54:b8f9 dev wlan0 lladdr 78:9a:18:54:b8:f9 router STALE\nfe80::babe:f4ff:fec2:bf14 dev wlan0 lladdr b8:be:f4:c2:bf:14 STALE\nfe80::babe:f4ff:febc:caf9 dev wlan0 lladdr b8:be:f4:bc:ca:f9 STALE", + "ip6_route": "fe80::/64 dev wlan0 table 1000000015 proto static metric 1024 pref medium\nfe80::/64 dev dummy0 table 1002 proto kernel metric 256 pref medium\ndefault dev dummy0 table 1002 proto static metric 1024 pref medium\nfe80::/64 dev wlan0 table 1015 proto kernel metric 256 pref medium\nfe80::/64 dev wlan0 table 1015 proto static metric 1024 pref medium\ndefault via fe80::7a9a:18ff:fe54:b8f9 dev wlan0 table 1015 proto ra metric 1024 expires 1789sec pref medium\nlocal ::1 dev lo table local proto kernel metric 0 pref medium\nlocal fe80::cd8:14ff:fe58:6c8b dev wlan0 table local proto kernel metric 0 pref medium\nlocal fe80::1450:43ff:feec:93c4 dev dummy0 table local proto kernel metric 0 pref medium\nmulticast ff00::/8 dev dummy0 table local proto kernel metric 256 pref medium\nmulticast ff00::/8 dev wlan0 table local proto kernel metric 256 pref medium", + "ip_addr": "1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000\n link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00\n inet 127.0.0.1/8 scope host lo\n valid_lft forever preferred_lft forever\n inet6 ::1/128 scope host \n valid_lft forever preferred_lft forever\n2: dummy0: mtu 1500 qdisc noqueue state UNKNOWN group default qlen 1000\n link/ether 16:50:43:ec:93:c4 brd ff:ff:ff:ff:ff:ff\n inet6 fe80::1450:43ff:feec:93c4/64 scope link \n valid_lft forever preferred_lft forever\n3: ifb0: mtu 1500 qdisc noop state DOWN group default qlen 32\n link/ether f6:d4:d4:9b:51:9c brd ff:ff:ff:ff:ff:ff\n4: ifb1: mtu 1500 qdisc noop state DOWN group default qlen 32\n link/ether fe:16:ea:60:a2:d1 brd ff:ff:ff:ff:ff:ff\n5: tunl0@NONE: mtu 1480 qdisc noop state DOWN group default qlen 1000\n link/ipip 0.0.0.0 brd 0.0.0.0\n6: gre0@NONE: mtu 1476 qdisc noop state DOWN group default qlen 1000\n link/gre 0.0.0.0 brd 0.0.0.0\n7: gretap0@NONE: mtu 1462 qdisc noop state DOWN group default qlen 1000\n link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:f", + "ip_monitor": "EXEC_TIMEOUT(newProcess)", + "dhcp_log": "Recently active IpClient logs:\nIpClient.wlan0\n IpClient.wlan0 APF dump:\n No active ApfFilter; IpClient not yet started.\n \n IpClient.wlan0 current ProvisioningConfiguration:\n N/A\n \n IpClient.wlan0 StateMachine dump:\n 2026-07-29T23:22:48.872598 - INVOKE onPostDhcpAction()\n 2026-07-29T23:22:48.874094 - INVOKE onNewDhcpResults({com.android.networkstack.android.net.DhcpResults@52956600 DHCP server /10.13.102.1 Vendor info null lease 600 seconds Servername })\n 2026-07-29T23:22:48.874698 - INVOKE onLinkPropertiesChange({{InterfaceName: wlan0 LinkAddresses: [ fe80::cd8:14ff:fe58:6c8b/64,10.13.102.120/24 ] DnsAddresses: [ /10.13.102.1 ] Domains: hudelist.local MTU: 0 ServerAddress: /10.13.102.1 TcpBufferSizes: 1730560,3461120,6922240,524288,1048576,4525824 Routes: [ fe80::/64 -> :: wlan0 mtu 0,10.13.102.0/24 -> 0.0.0.0 wlan0 mtu 0,0.0.0.0/0 -> 10.13.102.1 wlan0 mtu 0 ]}})\n 2026-07-29T23:22:48.875168 - CMD_POST_DHCP_ACTION wlan0/15 1 0 com.android.networkstack.android.net.DhcpResults@52956600 DHCP server /10.13.102.1 Vendor info null lease 600 seconds Servername [rcvd_in=RunningState, proc_in=IpClient$RunningState]\n 2026-07-29T23:22:48.876679 - CMD_CONFIGURE_LINKAD", + "wifi_dump": "rec[0]: time=07-30 15:05:53.668 processed=L2ConnectedState org=L3ConnectedState dest= what=CMD_POST_DHCP_ACTION screen=off v4 v4r v4dns v6r\n rec[1]: time=07-30 15:05:53.678 processed=L2ConnectedState org=L3ConnectedState dest= what=CMD_IPV4_PROVISIONING_SUCCESS screen=off DhcpResultsParcelable{baseConfiguration: IP address 10.13.102.120/24 Gateway 10.13.102.1 DNS servers: [ 10.13.102.1 ] Domains hudelist.local, leaseDuration: 600, mtu: 0, serverAddress: 10.13.102.1, vendorInfo: null, serverHostName: , captivePortalApiUrl: null}\n rec[2]: time=07-30 15:05:53.692 processed=ConnectableState org=L3ConnectedState dest= what=CMD_UPDATE_LINKPROPERTIES screen=off 2 0 v4 v4r v4dns v6r\n rec[3]: time=07-30 15:06:21.086 processed=ConnectableState org=L3ConnectedState dest= what=CMD_INSTALL_PACKET_FILTER screen=off len=440\n--\n rec[6]: time=07-30 15:10:55.147 processed=L2ConnectedState org=L3ConnectedState dest= what=CMD_POST_DHCP_ACTION screen=off v4 v4r v4dns v6r\n rec[7]: time=07-30 15:10:55.152 processed=L2ConnectedState org=L3ConnectedState dest= what=CMD_IPV4_PROVISIONING_SUCCESS screen=off DhcpResultsParcelable{baseConfiguration: IP address 10.13.102.120" + }, + "durationMs": 57836 + } + ] +} \ No newline at end of file