You have an issue in configuration that if you disabled Tunnel 2 >> Tunnel 1 HUB and it's spokes will be Fine .
But Enabling Tunnel 2 >> will cause Tunel 1 Spokes Not fully authenticated into HUB .
Had the same Issue .
your should Configure this command in each HUB Tunnel :
ip tcp adjust-mss 1360
Best Regards .
... View more