tunnel mode may not be applied if SA mode is ANY and policy does not say "tunnel it".  check if we have extra IPv6 header on the packet after ipsec6_output_tunnel() and call ip6_output() only if additional IPv6 header is added.
tunnel mode may not be applied if SA mode is ANY and policy does not
say "tunnel it".  check if we have extra IPv6 header on the packet after
ipsec6_output_tunnel() and call ip6_output() only if additional IPv6 header is
added.

MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame