348 		log_debug("%s: updated local CERTREQ type %s length %zu",  in ikev2_dispatch_cert()
372 			log_debug("%s: failed to get cert payload",  in ikev2_dispatch_cert()
381 			log_debug("%s: peer certificate is valid", __func__);  in ikev2_dispatch_cert()
385 				log_debug("%s: failed to send ike auth", __func__);  in ikev2_dispatch_cert()
395 			log_debug("%s: invalid cert reply", __func__);  in ikev2_dispatch_cert()
407 		log_debug("%s: cert type %s length %zu, %s", __func__,  in ikev2_dispatch_cert()
425 			log_debug("%s: failed to get cert payload",  in ikev2_dispatch_cert()
433 			log_debug("%s: failed to send ike auth", __func__);  in ikev2_dispatch_cert()
438 			log_debug("%s: invalid supplemental cert reply",  in ikev2_dispatch_cert()
447 		log_debug("%s: supplemental cert type %s length %zu, %s",  in ikev2_dispatch_cert()
463 			log_debug("%s: too many supplemental cert. ignored",  in ikev2_dispatch_cert()
474 			log_debug("%s: failed to get supplemental cert payload",  in ikev2_dispatch_cert()
483 			log_debug("%s: invalid auth reply", __func__);  in ikev2_dispatch_cert()
493 		log_debug("%s: AUTH type %d len %zu", __func__, type, len);  in ikev2_dispatch_cert()
504 				log_debug("%s: failed to get auth payload",  in ikev2_dispatch_cert()
513 			log_debug("%s: failed to send ike auth", __func__);  in ikev2_dispatch_cert()
569 	log_debug("%s: %s %d", __func__, reset_id, type);  in ikev2_ctl_reset_id()
628 	log_debug("%s: imsg %d rspi %s ispi %s initiator %d sa %s"  in ikev2_getimsgdata()
678 		log_debug("%s: no compatible policy found", __func__);  in ikev2_recv()
694 	log_debug("%s: ispi %s rspi %s", __func__,  in ikev2_recv()
803 	log_debug("%s: updated SA to peer %s local %s", __func__,  in ikev2_recv()
825 		log_debug("%s: closing SA", __func__);  in ikev2_recv()
909 		log_debug("%s: failed to get auth data",  in ikev2_auth_verify()
931 			log_debug("%s: failed to get auth data",  in ikev2_auth_verify()
1047 		log_debug("%s: missing auth payload", SPI_SA(sa, __func__));  in ikev2_ike_auth_recv()
1059 				log_debug("%s: failed to get response "  in ikev2_ike_auth_recv()
1187 		log_debug("%s: unknown SA", __func__);  in ikev2_init_recv()
1198 			log_debug("%s: invalid new SA", __func__);  in ikev2_init_recv()
1211 		log_debug("%s: unsupported exchange: %s", __func__,  in ikev2_init_recv()
1217 		log_debug("%s: failed to parse message", __func__);  in ikev2_init_recv()
1265 			log_debug("%s: AUTHENTICATION_FAILED, closing SA",  in ikev2_init_recv()
1302 		log_debug("%s: exchange %s not implemented", __func__,  in ikev2_init_recv()
1336 	log_debug("%s: detected NAT, enabling UDP encapsulation,"  in ikev2_enable_natt()
1350 			log_debug("%s: \"%s\" is already active",  in ikev2_init_ike_sa()
1358 			log_debug("%s: failed to initiate with peer %s",  in ikev2_init_ike_sa()
1371 	log_debug("%s: ispi %s rspi %s", __func__,  in ikev2_init_ike_sa_timeout()
1462 		log_debug("%s: added cookie, len %zu", __func__,  in ikev2_init_ike_sa_peer()
1486 		log_debug("%s: invalid dh", __func__);  in ikev2_init_ike_sa_peer()
1522 			log_debug("%s: enforcing NAT-T", __func__);  in ikev2_init_ike_sa_peer()
1543 		log_debug("%s: failed to copy 1st message", __func__);  in ikev2_init_ike_sa_peer()
1558 		log_debug("%s: closing SA", __func__);  in ikev2_init_ike_sa_peer()
1615 		log_debug("%s: no local auth", __func__);  in ikev2_init_ike_auth()
1637 			log_debug("%s: failed to get remote id", __func__);  in ikev2_init_ike_auth()
1895 	log_debug("%s: %s %s length %zu", __func__,  in ikev2_policy2id()
1910 		log_debug("%s: failed to add header", __func__);  in ikev2_add_header()
1935 		log_debug("%s: message too long", __func__);  in ikev2_set_header()
1950 		log_debug("%s: failed to add payload", __func__);  in ikev2_add_payload()
2135 	log_debug("%s: type %s length %zd", __func__,  in ikev2_add_certreq()
2174 	log_debug("%s: ic_cpi_in 0x%04x", __func__, spi);  in ikev2_add_ipcompnotify()
2220 	log_debug("%s: done", __func__);  in ikev2_add_notify()
2307 		log_debug("%s: payload too long", __func__);  in ikev2_next_payload()
2311 	log_debug("%s: length %zu nextpayload %s",  in ikev2_next_payload()
2363 		log_debug("%s: %s source %s %s %s", __func__,  in ikev2_nat_detection()
2371 		log_debug("%s: %s destination %s %s %s", __func__,  in ikev2_nat_detection()
2703 			log_debug("%s: failed to add proposal", __func__);  in ikev2_add_proposals()
2794 	log_debug("%s: length %zd", __func__, length);  in ikev2_add_proposals()
2807 		log_debug("%s: failed to add transform", __func__);  in ikev2_add_transform()
2818 			log_debug("%s: failed to add attribute", __func__);  in ikev2_add_transform()
2836 		log_debug("%s: failed", __func__);  in ikev2_add_data()
2850 		log_debug("%s: failed", __func__);  in ikev2_add_buf()
2909 		log_debug("%s: added cookie2", __func__);  in ikev2_resp_informational()
2922 		log_debug("%s: AUTHENTICATION_FAILED, closing SA",  in ikev2_resp_informational()
2944 			log_debug("%s: SA already exists", __func__);  in ikev2_resp_recv()
2950 			log_debug("%s: failed to get new SA", __func__);  in ikev2_resp_recv()
2963 			log_debug("%s: already authenticated", __func__);  in ikev2_resp_recv()
2973 		log_debug("%s: unsupported exchange: %s", __func__,  in ikev2_resp_recv()
2999 		log_debug("%s: NAT-T message received, updated SA", __func__);  in ikev2_resp_recv()
3016 			log_debug("%s: failed to send init response", __func__);  in ikev2_resp_recv()
3024 			log_debug("%s: state mismatch", __func__);  in ikev2_resp_recv()
3043 			log_debug("%s: failed to send auth response", __func__);  in ikev2_resp_recv()
3100 			log_debug("%s: invalid SPI size", __func__);  in ikev2_handle_delete()
3114 		log_debug("%s: invalid payload length %zu/%zu != %zu",  in ikev2_handle_delete()
3138 		log_debug("%s: spi %s", __func__, print_spi(spi, sz));  in ikev2_handle_delete()
3240 		log_debug("%s: fragmentation enabled", __func__);  in ikev2_handle_notifies()
3245 		log_debug("%s: mobike enabled", __func__);  in ikev2_handle_notifies()
3262 			log_debug("%s: unable to select DH group %u",  in ikev2_handle_notifies()
3270 		log_debug("%s: responder selected DH group %u", __func__,  in ikev2_handle_notifies()
3276 				log_debug("%s: not an initiator", __func__);  in ikev2_handle_notifies()
3285 				log_debug("%s: DH group %u denied by policy",  in ikev2_handle_notifies()
3303 				log_debug("%s: IKED_REQ_CHILDSA missing",  in ikev2_handle_notifies()
3312 				log_debug("%s: DH group %u denied by policy",  in ikev2_handle_notifies()
3387 		log_debug("%s: called by initiator", __func__);  in ikev2_resp_ike_sa_init()
3391 		log_debug("%s: detected NAT, enabling UDP encapsulation",  in ikev2_resp_ike_sa_init()
3429 		log_debug("%s: invalid dh", __func__);  in ikev2_resp_ike_sa_init()
3494 		log_debug("%s: failed to copy 2nd message", __func__);  in ikev2_resp_ike_sa_init()
3603 			log_debug("%s: invalid SPI size %d", __func__,  in ikev2_add_error()
3623 	log_debug("%s: done", __func__);  in ikev2_add_error()
3698 		log_debug("%s: called by initiator", __func__);  in ikev2_send_init_error()
4142 		log_debug("%s: rekeying %s spi %s", __func__,  in ikev2_send_create_child_sa()
4146 		log_debug("%s: creating new CHILD SAs", __func__);  in ikev2_send_create_child_sa()
4150 		log_debug("%s: another exchange already active",  in ikev2_send_create_child_sa()
4164 		log_debug("%s: CHILD SA %s wasn't found", __func__,  in ikev2_send_create_child_sa()
4204 		log_debug("%s: ikev2_set_sa_proposal failed", __func__);  in ikev2_send_create_child_sa()
4224 		log_debug("%s: enable PFS", __func__);  in ikev2_send_create_child_sa()
4229 				log_debug("%s: failed to get group", __func__);  in ikev2_send_create_child_sa()
4234 			log_debug("%s: failed to setup DH", __func__);  in ikev2_send_create_child_sa()
4246 			log_debug("%s: invalid dh", __func__);  in ikev2_send_create_child_sa()
4313 	log_debug("%s: IKE SA %p ispi %s rspi %s", __func__, sa,  in ikev2_ike_sa_rekey()
4318 		log_debug("%s: already rekeying", __func__);  in ikev2_ike_sa_rekey()
4337 		log_debug("%s: failed to get new SA", __func__);  in ikev2_ike_sa_rekey()
4342 		log_debug("%s: failed to setup DH", __func__);  in ikev2_ike_sa_rekey()
4379 		log_debug("%s: invalid dh", __func__);  in ikev2_ike_sa_rekey()
4407 		log_debug("%s: create child SA sent", __func__);  in ikev2_ike_sa_rekey()
4409 		log_debug("%s: could not send create child SA", __func__);  in ikev2_ike_sa_rekey()
4570 		log_debug("%s: using PFS", __func__);  in ikev2_init_create_child_sa()
4668 	log_debug("%s: IKE SA %p ispi %s rspi %s replaced"  in ikev2_ikesa_enable()
4864 			log_debug("%s: resolving simultaneous IKE SA rekeying",  in ikev2_ikesa_recv_delete()
4934 		log_debug("%s: rekey %s spi %s", __func__,  in ikev2_resp_create_child_sa()
4938 		log_debug("%s: creating new %s SA", __func__,  in ikev2_resp_create_child_sa()
4944 			log_debug("%s: Ignore IKE SA rekey: waiting for Child "  in ikev2_resp_create_child_sa()
4956 			log_debug("%s: failed to get new SA", __func__);  in ikev2_resp_create_child_sa()
4961 			log_debug("%s: failed to get IKE SA keys", __func__);  in ikev2_resp_create_child_sa()
4973 			log_debug("%s: calloc kex", __func__);  in ikev2_resp_create_child_sa()
4991 			log_debug("%s: using PFS", __func__);  in ikev2_resp_create_child_sa()
4994 				log_debug("%s: failed to setup DH", __func__);  in ikev2_resp_create_child_sa()
5007 			log_debug("%s: failed to find %s proposals", __func__,  in ikev2_resp_create_child_sa()
5037 			log_debug("%s: initiator didn't send nonce", __func__);  in ikev2_resp_create_child_sa()
5053 			log_debug("%s: failed to get CHILD SAs", __func__);  in ikev2_resp_create_child_sa()
5118 			log_debug("%s: invalid dh", __func__);  in ikev2_resp_create_child_sa()
5184 	log_debug("%s: closing SA", __func__);  in ikev2_ike_sa_timeout()
5194 	log_debug("%s: closing SA", __func__);  in ikev2_ike_sa_rekey_timeout()
5238 		log_debug("%s: %s CHILD SA spi %s last used %llu second(s) ago",  in ikev2_ike_sa_alive()
5255 		log_debug("%s: IKE SA %p ispi %s rspi %s last received %llu"  in ikev2_ike_sa_alive()
5268 		log_debug("%s: sending alive check", __func__);  in ikev2_ike_sa_alive()
5293 		log_debug("%s: peer %s local %s", __func__,  in ikev2_ike_sa_keepalive()
5364 			log_debug("%s: encryption failed", __func__);  in ikev2_send_informational()
5378 			log_debug("%s: integrity checksum failed", __func__);  in ikev2_send_informational()
5451 			log_debug("%s: did not find dh transform", __func__);  in ikev2_sa_initiator_dh()
5456 			log_debug("%s: invalid dh %d", __func__,  in ikev2_sa_initiator_dh()
5465 			log_debug("%s: failed to get dh exchange", __func__);  in ikev2_sa_initiator_dh()
5476 			log_debug("%s: invalid peer dh exchange", __func__);  in ikev2_sa_initiator_dh()
5618 			log_debug("%s: invalid dh %d",  in ikev2_sa_responder_dh()
5684 		log_debug("%s: failed to copy 1st message", __func__);  in ikev2_sa_responder()
5690 		log_debug("%s: failed to get local nonce", __func__);  in ikev2_sa_responder()
5696 		log_debug("%s: failed to get peer nonce", __func__);  in ikev2_sa_responder()
5783 	log_debug("%s: DHSECRET with %zu bytes", SPI_SA(sa, __func__),  in ikev2_sa_keys()
5826 	log_debug("%s: SKEYSEED with %zu bytes", __func__, tmplen);  in ikev2_sa_keys()
5856 	log_debug("%s: S with %zu bytes", SPI_SA(sa, __func__), ibuf_size(s));  in ikev2_sa_keys()
5891 		log_debug("%s: failed to get SA keys", SPI_SA(sa, __func__));  in ikev2_sa_keys()
5895 	log_debug("%s: SK_d with %zu bytes", __func__, ibuf_size(sa->sa_key_d));  in ikev2_sa_keys()
5898 		log_debug("%s: SK_ai with %zu bytes", __func__,  in ikev2_sa_keys()
5901 		log_debug("%s: SK_ar with %zu bytes", __func__,  in ikev2_sa_keys()
5905 	log_debug("%s: SK_ei with %zu bytes", __func__,  in ikev2_sa_keys()
5908 	log_debug("%s: SK_er with %zu bytes", __func__,  in ikev2_sa_keys()
5911 	log_debug("%s: SK_pi with %zu bytes", __func__,  in ikev2_sa_keys()
5914 	log_debug("%s: SK_pr with %zu bytes", __func__,  in ikev2_sa_keys()
5959 		log_debug("%s: failed to set prf+ key", __func__);  in ikev2_prfplus()
5964 		log_debug("%s: failed to get T buffer", __func__);  in ikev2_prfplus()
5993 		log_debug("%s: T%d with %zu bytes", __func__,  in ikev2_prfplus()
5998 	log_debug("%s: Tn with %zu bytes", __func__, ibuf_size(t));  in ikev2_prfplus()
6026 		log_debug("%s: calloc", __func__);  in ikev2_sa_tag()
6030 		log_debug("%s: tag too long", __func__);  in ikev2_sa_tag()
6035 		log_debug("%s: invalid id", __func__);  in ikev2_sa_tag()
6049 			log_debug("%s: failed to expand tag", __func__);  in ikev2_sa_tag()
6057 			log_debug("%s: failed to expand tag", __func__);  in ikev2_sa_tag()
6065 			log_debug("%s: failed to expand tag", __func__);  in ikev2_sa_tag()
6080 			log_debug("%s: no valid domain in ID %s",  in ikev2_sa_tag()
6086 			log_debug("%s: failed to expand tag", __func__);  in ikev2_sa_tag()
6091 	log_debug("%s: %s (%zu)", __func__, sa->sa_tag, strlen(sa->sa_tag));  in ikev2_sa_tag()
6190 		log_debug("%s: proposal %d", __func__, prop->prop_id);  in ikev2_childsa_negotiate()
6215 	log_debug("%s: key material length %zu", __func__, ilen);  in ikev2_childsa_negotiate()
6218 		log_debug("%s: failed to setup IKE SA key material", __func__);  in ikev2_childsa_negotiate()
6222 		log_debug("%s: using PFS", __func__);  in ikev2_childsa_negotiate()
6226 			log_debug("%s: no dh group for pfs", __func__);  in ikev2_childsa_negotiate()
6230 			log_debug("%s: failed to get dh secret"  in ikev2_childsa_negotiate()
6237 			log_debug("%s: failed to set dh secret", __func__);  in ikev2_childsa_negotiate()
6245 		log_debug("%s: failed to get IKE SA key material", __func__);  in ikev2_childsa_negotiate()
6257 				log_debug("%s: failed to get flow", __func__);  in ikev2_childsa_negotiate()
6287 				log_debug("%s: failed to get flow", __func__);  in ikev2_childsa_negotiate()
6318 			log_debug("%s: failed to get CHILD SA", __func__);  in ikev2_childsa_negotiate()
6357 			log_debug("%s: failed to get CHILD SA encryption key",  in ikev2_childsa_negotiate()
6363 			log_debug("%s: failed to get CHILD SA integrity key",  in ikev2_childsa_negotiate()
6373 			log_debug("%s: failed to get CHILD SA", __func__);  in ikev2_childsa_negotiate()
6390 			log_debug("%s: failed to get CHILD SA encryption key",  in ikev2_childsa_negotiate()
6396 			log_debug("%s: failed to get CHILD SA integrity key",  in ikev2_childsa_negotiate()
6404 				log_debug("%s: failed to get CHILD SA", __func__);  in ikev2_childsa_negotiate()
6408 				log_debug("%s: failed to get CHILD SA", __func__);  in ikev2_childsa_negotiate()
6520 			log_debug("%s: failed to load CHILD SA spi %s",  in ikev2_childsa_enable()
6527 				log_debug("%s: failed to load IPCOMP spi %s",  in ikev2_childsa_enable()
6536 			log_debug("%s: replaced CHILD SA %p with %p spi %s",  in ikev2_childsa_enable()
6546 		log_debug("%s: loaded CHILD SA spi %s", __func__,  in ikev2_childsa_enable()
6584 					log_debug("%s: flow already loaded %p",  in ikev2_childsa_enable()
6595 				log_debug("%s: failed to load flow", __func__);  in ikev2_childsa_enable()
6601 				log_debug("%s: replaced old flow %p with %p",  in ikev2_childsa_enable()
6609 			log_debug("%s: %sloaded flow %p", __func__,  in ikev2_childsa_enable()
6644 		log_debug("%s: remember SA peer %s", __func__,  in ikev2_childsa_enable()
6696 			log_debug("%s: deleted CHILD SA spi %s",  in ikev2_childsa_delete()
6713 					log_debug("%s: deleted IPCOMP SA spi %s",  in ikev2_childsa_delete()
6808 		log_debug("%s: found matching policy '%s'", __func__,  in ikev2_child_sa_acquire()
6817 		log_debug("%s: found active flow", __func__);  in ikev2_child_sa_acquire()
6906 		log_debug("%s: parent SA busy", __func__);  in ikev2_child_sa_drop()
6914 		log_debug("%s: failed to find a parent SA", __func__);  in ikev2_child_sa_drop()
6925 		log_debug("%s: failed to delete CHILD SA %s", __func__,  in ikev2_child_sa_drop()
7156 		log_debug("%s: pool configured, but IKEV2_CP_REQUEST missing",  in ikev2_cp_setaddr_pool()
7294 		log_debug("%s: mask %x start %x lower %x host %x upper %x",  in ikev2_cp_setaddr_pool()
7369 			log_debug("%s: yes", SPI_SA(sa, __func__));  in ikev2_cp_request_configured()
7373 	log_debug("%s: no", SPI_SA(sa, __func__));  in ikev2_cp_request_configured()
7467 			log_debug("%s: failed to update sa", __func__);  in ikev2_update_sa_addresses()
7472 				log_debug("%s: failed to update sa", __func__);  in ikev2_update_sa_addresses()
7483 			log_debug("%s: failed to add flow %p", __func__, flow);  in ikev2_update_sa_addresses()
7488 			log_debug("%s: replaced old flow %p with %p",  in ikev2_update_sa_addresses()
7552 		log_debug("%s", buf);  in ikev2_info_sa()
7588 		log_debug("%s", buf);  in ikev2_info_csa()
7635 		log_debug("%s", buf);  in ikev2_info_flow()
7650 	log_debug("%s: called", __func__);  in ikev2_info()