xfrm_sec_ctx_match
xfrm_sec_ctx_match(pol->security, policy->security) &&
xfrm_sec_ctx_match(ctx, pol->security))