========== Start marking the full check here =========== ```bash Script v.2026-01-31 *** BASE SYSTEM *** Operating System: Debian GNU/Linux 12 (bookworm) Static hostname: debian Icon name: computer-desktop Chassis: desktop 🖥 Kernel: Linux 6.1.0-40-amd64 Architecture: x86-64 Hardware Vendor: Intel_R_ Client Systems Hardware Model: NUC6CAYH Firmware Version: AYAPLCEL.86A.0060.2019.0219.1527 OS is similar to: model name : Intel(R) Celeron(R) CPU J3455 @ 1.50GHz Docker : false Virtualization : none Kernel : x86_64 Userland : 64 bit Systemuptime and Load: 22:50:55 up 12:19, 2 users, load average: 0.05, 0.18, 0.13 CPU threads: 4 *** LIFE CYCLE STATUS *** Debian 'bookworm' is the current oldstable version. Please upgrade to the latest stable release 'trixie' in due time! *** TIME AND TIMEZONES *** Local time: Sat 2026-03-21 22:50:56 CET Universal time: Sat 2026-03-21 21:50:56 UTC RTC time: Sat 2026-03-21 21:50:56 Time zone: Europe/Berlin (CET, +0100) System clock synchronized: yes NTP service: active RTC in local TZ: no *** Users and Groups *** User that called 'iob diag': werner HOME=/home/werner GROUPS=werner adm cdrom floppy sudo audio dip video plugdev users netdev iobroker User that is running 'js-controller': iobroker HOME=/home/iobroker GROUPS=iobroker tty dialout audio video plugdev *** DISPLAY-SERVER SETUP *** Display-Server: false Unit display-manager.service could not be found. Display-Manager: Desktop: Session: tty System is booting into 'graphical.target'. Usually a server is running in 'multi-user.target'. Please set BootTarget to 'multi-user.target' or run 'iobroker fix' *** MEMORY *** total used free shared buff/cache available Mem: 8.2G 1.4G 4.4G 1.5M 2.7G 6.7G Swap: 1.0G 0B 1.0G Total: 9.2G 1.4G 5.4G Active iob-Instances: 3 7786 M total memory 1363 M used memory 643 M active memory 2622 M inactive memory 4156 M free memory 185 M buffer memory 2384 M swap cache 976 M total swap 0 M used swap 976 M free swap *** top - Table Of Processes *** top - 22:50:56 up 12:19, 2 users, load average: 0.05, 0.18, 0.13 Tasks: 122 total, 1 running, 121 sleeping, 0 stopped, 0 zombie %Cpu(s): 25.0 us, 0.0 sy, 0.0 ni, 75.0 id, 0.0 wa, 0.0 hi, 0.0 si, 0.0 st MiB Mem : 7786.5 total, 4156.7 free, 1363.6 used, 2569.6 buff/cache MiB Swap: 977.0 total, 977.0 free, 0.0 used. 6422.9 avail Mem *** FAILED SERVICES *** UNIT LOAD ACTIVE SUB DESCRIPTION 0 loaded units listed. *** DMESG CRITICAL ERRORS *** No critical errors detected *** FILESYSTEM *** Filesystem Type Size Used Avail Use% Mounted on udev devtmpfs 3.8G 0 3.8G 0% /dev tmpfs tmpfs 779M 844K 778M 1% /run /dev/sda2 ext4 227G 8.8G 207G 5% / tmpfs tmpfs 3.9G 0 3.9G 0% /dev/shm tmpfs tmpfs 5.0M 0 5.0M 0% /run/lock /dev/sda1 vfat 511M 6.2M 505M 2% /boot/efi tmpfs tmpfs 779M 0 779M 0% /run/user/1000 Messages concerning ext4 filesystem in dmesg: [Sat Mar 21 10:31:25 2026] EXT4-fs (sda2): mounted filesystem with ordered data mode. Quota mode: none. [Sat Mar 21 10:31:26 2026] EXT4-fs (sda2): re-mounted. Quota mode: none. Show mounted filesystems: TARGET SOURCE FSTYPE OPTIONS / /dev/sda2 ext4 rw,relatime,errors=remount-ro `-/boot/efi /dev/sda1 vfat rw,relatime,fmask=0077,dmask=0077,codepage=437,iocharset=ascii,shortname=mixed,utf8,errors=remount-ro Files in neuralgic directories: /var: 982M /var/ 416M /var/log 401M /var/log/journal/d32a0fa7bcf746e6a7b70bac8b686bbb 401M /var/log/journal 388M /var/cache Archived and active journals take up 400.3M in the file system. /opt/iobroker/backups: 612M /opt/iobroker/backups/ /opt/iobroker/iobroker-data: 813M /opt/iobroker/iobroker-data/ 459M /opt/iobroker/iobroker-data/files 256M /opt/iobroker/iobroker-data/history 78M /opt/iobroker/iobroker-data/files/icons-open-icon-library-png 67M /opt/iobroker/iobroker-data/files/echarts.admin The five largest files in iobroker-data are: 31M /opt/iobroker/iobroker-data/objects.jsonl 27M /opt/iobroker/iobroker-data/files/tankerkoenig.admin/build/index.js.map 26M /opt/iobroker/iobroker-data/files/echarts/static/js/main.41cee985.js.map 26M /opt/iobroker/iobroker-data/files/echarts.admin/chart/static/js/main.41cee985.js.map 24M /opt/iobroker/iobroker-data/files/echarts.admin/static/js/main.70a15e1f.js.map USB-Devices by-id: USB-Sticks - Avoid direct links to /dev/tty* in your adapter setups, please always prefer the links 'by-id': No Devices found 'by-id' No nvbackup.json found. *** NodeJS-Installation *** /usr/bin/nodejs v24.11.0 /home/werner/.nvm/versions/node/v24.9.0/bin/node v24.9.0 /home/werner/.nvm/versions/node/v24.9.0/bin/npm 11.6.0 /home/werner/.nvm/versions/node/v24.9.0/bin/npx 11.6.0 *** Node.js is NOT correctly installed *** Issues: node path npm path npx path nodejs/node version mismatch Execute 'iob nodejs-update' in your terminal. nodejs: Installed: 24.11.0-1nodesource1 Candidate: 24.14.0-1nodesource1 Version table: 24.14.0-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 24.13.1-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 24.13.0-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 24.12.0-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 24.11.1-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages *** 24.11.0-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 100 /var/lib/dpkg/status 24.10.0-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 24.9.0-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 24.8.0-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 24.7.0-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 24.6.0-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 24.5.0-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 24.4.1-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 24.4.0-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 24.3.0-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 24.1.0-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 24.0.2-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 24.0.1-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 24.0.0-1nodesource1 600 500 https://deb.nodesource.com/node_24.x nodistro/main amd64 Packages 18.20.4+dfsg-1~deb12u1 500 500 http://deb.debian.org/debian bookworm/main amd64 Packages 500 http://security.debian.org/debian-security bookworm-security/main amd64 Packages Temp directories causing deletion problem: 0 No problems detected Errors in npm tree: 0 No problems detected Checking for nodejs vulnerability: ██████ █████ ███ ██ ██████ ███████ ███████ ██ ██ ██ ██ ████ ██ ██ ██ ██ ██ ██ ██ ███████ ██ ██ ██ ██ ███ █████ ███████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██████ ██ ██ ██ ████ ██████ ███████ ██ ██ The current Node.js version (v24.11.0) is vulnerable to the following CVEs: CVE-2025-55130(high): A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files. This breaks the expected isolation guarantees and enables arbitrary file read/write, leading to potential system compromise. This vulnerability affects users of the permission model on Node.js v20, v22, v24, and v25. Patched versions: ^20.20.0 || ^22.22.0 || ^24.13.0 || ^25.3.0 = CVE-2025-55131(high): A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module with the timeout option. Under specific timing conditions, buffers allocated with `Buffer.alloc` and other `TypedArray` instances like `Uint8Array` may contain leftover data from previous operations, allowing in-process secrets like tokens or passwords to leak or causing data corruption. While exploitation typically requires precise timing or in-process code execution, it can become remotely exploitable when untrusted input influences workload and timeouts, leading to potential confidentiality and integrity impact. Patched versions: ^20.20.0 || ^22.22.0 || ^24.13.0 || ^25.3.0 = CVE-2025-55132(low): A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via `futimes()` even when the process has only read permissions. Unlike `utimes()`, `futimes()` does not apply the expected write-permission checks, which means file metadata can be modified in read-only directories. This behavior could be used to alter timestamps in ways that obscure activity, reducing the reliability of logs. This vulnerability affects users of the permission model on Node.js v20, v22, v24, and v25. Patched versions: ^20.20.0 || ^22.22.0 || ^24.13.0 || ^25.3.0 = CVE-2025-59464(medium): A memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields to UTF-8 without freeing the allocated buffer. When applications call `socket.getPeerCertificate(true)`, each certificate field leaks memory, allowing remote clients to trigger steady memory growth through repeated TLS connections. Over time this can lead to resource exhaustion and denial of service. Patched versions: ^24.12.0 = CVE-2025-59465(high): A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not attach explicit error handlers to secure sockets, for example: ``` server.on('secureConnection', socket => { socket.on('error', err => { console.log(err) }) }) ``` Patched versions: ^20.20.0 || ^22.22.0 || ^24.13.0 || ^25.3.0 = CVE-2025-59466(medium): We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on('uncaughtException')`, the process terminates, making the crash unrecoverable. Applications that rely on `AsyncLocalStorage` (v22, v20) or `async_hooks.createHook()` (v24, v22, v20) become vulnerable to denial-of-service crashes triggered by deep recursion under specific conditions. Patched versions: ^20.20.0 || ^22.22.0 || ^24.13.0 || ^25.3.0 = CVE-2026-21637(medium): A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCallback` or `ALPNCallback` are in use. Synchronous exceptions thrown during these callbacks bypass standard TLS error handling paths (tlsClientError and error), causing either immediate process termination or silent file descriptor leaks that eventually lead to denial of service. Because these callbacks process attacker-controlled input during the TLS handshake, a remote client can repeatedly trigger the issue. This vulnerability affects TLS servers using PSK or ALPN callbacks across Node.js versions where these callbacks throw without being safely wrapped. Patched versions: ^20.20.0 || ^22.22.0 || ^24.13.0 || ^25.3.0 = *** ioBroker-Installation *** ioBroker Status iobroker is running on this host. Objects type: jsonl States type: jsonl Hosts: debian debian (version: 7.0.7, hostname: debian , alive, uptime: 42079) Core adapters versions js-controller: 7.0.7 admin: 7.7.22 javascript: 9.0.18 nodejs modules from github: 0 Adapter State + system.adapter.admin.0 : admin : debian - enabled, port: 8081, bind: 0.0.0.0, run as: admin + system.adapter.backitup.0 : backitup : debian - enabled system.adapter.cloud.0 : cloud : debian - disabled system.adapter.daswetter.0 : daswetter : debian - disabled system.adapter.discovery.0 : discovery : debian - disabled system.adapter.dwd.0 : dwd : debian - disabled system.adapter.echarts.0 : echarts : debian - disabled system.adapter.feiertage.0 : feiertage : debian - disabled system.adapter.flot.0 : flot : debian - disabled system.adapter.fritzdect.0 : fritzdect : debian - disabled system.adapter.history.0 : history : debian - disabled system.adapter.hm-rega.0 : hm-rega : debian - disabled system.adapter.hm-rpc.0 : hm-rpc : debian - disabled, port: 18701 system.adapter.hm-rpc.1 : hm-rpc : debian - disabled, port: 12001 system.adapter.hm-rpc.2 : hm-rpc : debian - disabled, port: 0 system.adapter.hm-rpc.3 : hm-rpc : debian - disabled, port: 0 system.adapter.ical.0 : ical : debian - disabled system.adapter.ical.1 : ical : debian - disabled system.adapter.ical.2 : ical : debian - disabled system.adapter.icons-material-png.0 : icons-material-png : debian - disabled system.adapter.icons-mfd-png.0 : icons-mfd-png : debian - disabled system.adapter.icons-mfd-svg.0 : icons-mfd-svg : debian - disabled system.adapter.icons-open-icon-library-png.0: icons-open-icon-library-png: debian - disabled system.adapter.jarvis.0 : jarvis : debian - disabled system.adapter.javascript.0 : javascript : debian - disabled system.adapter.ping.0 : ping : debian - disabled system.adapter.pollenflug.0 : pollenflug : debian - disabled system.adapter.sprinklecontrol.0 : sprinklecontrol : debian - disabled system.adapter.tankerkoenig.0 : tankerkoenig : debian - disabled system.adapter.tr-064.0 : tr-064 : debian - disabled system.adapter.tr-064.1 : tr-064 : debian - disabled system.adapter.vis-fancyswitch.0 : vis-fancyswitch : debian - disabled system.adapter.vis-hqwidgets.0 : vis-hqwidgets : debian - disabled system.adapter.vis-jqui-mfd.0 : vis-jqui-mfd : debian - disabled system.adapter.vis-material-advanced.0 : vis-material-advanced : debian - disabled system.adapter.vis-timeandweather.0 : vis-timeandweather : debian - disabled system.adapter.vis.0 : vis : debian - disabled system.adapter.web.0 : web : debian - disabled, port: 8082, bind: 0.0.0.0, run as: admin + instance is alive Enabled adapters with bindings + system.adapter.admin.0 : admin : debian - enabled, port: 8081, bind: 0.0.0.0, run as: admin ioBroker-Repositories ┌─────────┬──────────┬─────────────────────────────────────────────────────────┬──────────────┐ │ (index) │ name │ url │ auto upgrade │ ├─────────┌──────────┌─────────────────────────────────────────────────────────┌─────────────── │ 0 │ 'stable' │ 'http://download.iobroker.net/sources-dist.json' │ true │ │ 1 │ 'beta' │ 'http://download.iobroker.net/sources-dist-latest.json' │ false │ └─────────┮──────────┮─────────────────────────────────────────────────────────┮──────────────┘ Active repo(s): stable Upgrade policy: none Installed ioBroker-Adapters Used repository: stable Adapter "admin" : 7.7.22 , installed 7.7.22 Adapter "backitup" : 3.3.14 , installed 3.3.14 Adapter "cloud" : 5.0.1 , installed 5.0.1 Adapter "daswetter" : 4.5.3 , installed 4.5.3 Adapter "discovery" : 5.0.0 , installed 5.0.0 Adapter "dwd" : 2.8.5 , installed 2.8.5 Adapter "echarts" : 1.9.2 , installed 1.9.2 Adapter "feiertage" : 1.3.0 , installed 1.3.0 Adapter "fritzdect" : 2.6.2 , installed 2.6.2 Adapter "history" : 3.0.1 , installed 3.0.1 Adapter "hm-rega" : 5.1.0 , installed 5.1.0 Adapter "hm-rpc" : 2.0.2 , installed 2.0.2 Adapter "ical" : 1.18.1 , installed 1.18.1 Adapter "icons-material-png": 0.1.0, installed 0.1.0 Adapter "icons-mfd-png": 1.2.1 , installed 1.2.1 Adapter "icons-mfd-svg": 1.2.0 , installed 1.2.0 Adapter "icons-open-icon-library-png": 0.1.2, installed 0.1.2 Adapter "jarvis" : 3.1.8 , installed 3.1.8 Adapter "javascript" : 9.0.18 , installed 9.0.18 Controller "js-controller": 7.0.7 , installed 7.0.7 Adapter "ping" : 1.7.9 , installed 1.7.9 Adapter "pollenflug" : 2.0.0 , installed 2.0.0 Adapter "socketio" : 6.7.1 , installed 7.0.8 Adapter "sprinklecontrol": 0.2.19 , installed 0.2.19 Adapter "tankerkoenig" : 3.4.0 , installed 3.4.0 Adapter "tr-064" : 4.3.0 , installed 4.3.0 Adapter "vis" : 1.5.6 , installed 1.5.6 Adapter "vis-fancyswitch": 1.1.0 , installed 1.1.0 Adapter "vis-hqwidgets": 1.5.1 , installed 1.5.1 Adapter "vis-jqui-mfd" : 1.1.1 , installed 1.1.1 Adapter "vis-material-advanced": 1.7.4, installed 1.7.4 Adapter "vis-timeandweather": 1.2.2, installed 1.2.2 Adapter "web" : 7.0.8 , installed 7.0.8 Adapter "ws" : 2.6.2 , installed 3.0.19 Objects and States Please stand by - This may take a while Objects: 9858 States: 8388 *** OS-Repositories and Updates *** Hit:1 http://deb.debian.org/debian bookworm InRelease Hit:2 http://deb.debian.org/debian bookworm-updates InRelease Hit:3 http://security.debian.org/debian-security bookworm-security InRelease Hit:4 https://deb.nodesource.com/node_24.x nodistro InRelease Reading package lists... Pending systemupdates: 58 *** Listening Ports *** Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name tcp 0 0 127.0.0.1:9000 0.0.0.0:* LISTEN 1001 22286 1824/iobroker.js-co tcp 0 0 127.0.0.1:9001 0.0.0.0:* LISTEN 1001 22281 1824/iobroker.js-co tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 0 680 1/init tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 0 20398 555/sshd: /usr/sbin tcp6 0 0 :::8081 :::* LISTEN 1001 24167 1849/io.admin.0 tcp6 0 0 :::111 :::* LISTEN 0 11384 1/init tcp6 0 0 :::80 :::* LISTEN 0 12276 575/apache2 tcp6 0 0 :::22 :::* LISTEN 0 20400 555/sshd: /usr/sbin udp 0 0 0.0.0.0:68 0.0.0.0:* 0 20686 517/dhclient udp 0 0 0.0.0.0:111 0.0.0.0:* 0 14132 1/init udp6 0 0 :::111 :::* 0 15314 1/init *** Log File - Last 25 Lines *** 2026-03-21 11:20:23.092 - info: host.debian iobroker npm-install: upload [10] web /opt/iobroker/node_modules/iobroker.web/www/lib/js/materialize.js lib/js/materialize.js application/javascript 2026-03-21 11:20:23.103 - info: host.debian iobroker npm-install: upload [9] web /opt/iobroker/node_modules/iobroker.web/www/lib/js/materialize.js.map lib/js/materialize.js.map application/json 2026-03-21 11:20:23.116 - info: host.debian iobroker npm-install: upload [8] web /opt/iobroker/node_modules/iobroker.web/www/lib/js/selectID.js lib/js/selectID.js application/javascript 2026-03-21 11:20:23.139 - info: host.debian iobroker npm-install: upload [7] web /opt/iobroker/node_modules/iobroker.web/www/lib/js/showdown.min.js lib/js/showdown.min.js application/javascript 2026-03-21 11:20:23.146 - info: host.debian iobroker npm-install: upload [6] web /opt/iobroker/node_modules/iobroker.web/www/lib/js/socket.io.js lib/js/socket.io.js application/javascript 2026-03-21 11:20:23.153 - info: host.debian iobroker npm-install: upload [5] web /opt/iobroker/node_modules/iobroker.web/www/lib/js/translate.js lib/js/translate.js application/javascript 2026-03-21 11:20:23.160 - info: host.debian iobroker npm-install: upload [4] web /opt/iobroker/node_modules/iobroker.web/www/login/favicon.ico login/favicon.ico image/vnd.microsoft.icon 2026-03-21 11:20:23.168 - info: host.debian iobroker npm-install: upload [3] web /opt/iobroker/node_modules/iobroker.web/www/login/index.html login/index.html text/html 2026-03-21 11:20:23.185 - info: host.debian iobroker npm-install: upload [2] web /opt/iobroker/node_modules/iobroker.web/www/login/manifest.json login/manifest.json application/json 2026-03-21 11:20:23.192 - info: host.debian iobroker npm-install: upload [1] web /opt/iobroker/node_modules/iobroker.web/www/logo.svg logo.svg image/svg+xml 2026-03-21 11:20:23.198 - info: host.debian iobroker npm-install: upload [0] web /opt/iobroker/node_modules/iobroker.web/www/manifest.json manifest.json application/json 2026-03-21 11:20:23.263 - info: host.debian iobroker npm-install: host.debian object system.adapter.web created/updated 2026-03-21 11:20:23.266 - info: host.debian iobroker npm-install: Updating objects from io-package.json for adapter "web" with version "7.0.8" 2026-03-21 11:20:24.360 - info: host.debian iobroker npm-install: exit 0 2026-03-21 17:22:50.233 - info: admin.0 (1849) ==> Connected system.user.admin from ::ffff:192.168.2.131 2026-03-21 17:23:49.423 - info: admin.0 (1849) ==> Connected system.user.admin from ::ffff:192.168.2.131 2026-03-21 17:24:49.520 - info: admin.0 (1849) <== Disconnect system.user.admin from ::ffff:192.168.2.131 backitup 2026-03-21 17:37:07.599 - info: admin.0 (1849) <== Disconnect system.user.admin from ::ffff:192.168.2.131 admin 2026-03-21 17:37:07.659 - info: admin.0 (1849) ==> Connected system.user.admin from ::ffff:192.168.2.131 2026-03-21 17:37:07.766 - info: admin.0 (1849) <== Disconnect system.user.admin from ::ffff:192.168.2.131 admin 2026-03-21 17:47:56.442 - info: admin.0 (1849) ==> Connected system.user.admin from ::ffff:192.168.2.131 2026-03-21 21:59:28.774 - info: admin.0 (1849) <== Disconnect system.user.admin from ::ffff:192.168.2.131 admin 2026-03-21 21:59:28.807 - info: admin.0 (1849) ==> Connected system.user.admin from ::ffff:192.168.2.131 2026-03-21 21:59:28.815 - info: admin.0 (1849) <== Disconnect system.user.admin from ::ffff:192.168.2.131 admin 2026-03-21 21:59:29.307 - info: admin.0 (1849) ==> Connected system.user.admin from ::ffff:192.168.2.131 ``` ============ Mark until here for C&P ============= iob diag has finished.